Director, Enterprise Security – Business Information Security Officer

Salesforce

. Own the security relationship for the assigned business unit .

Posted 11/4/2026full-timeUnited StatesLead💰 $197,300 - $313,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in cybersecurity engineering and IT risk management, with a strong focus on cloud, identity, application security, and AI/ML risks. Proven ability to lead high-performing teams, prioritize risks, and communicate effectively with executive leadership.

Highest-signal resume keywords

Cybersecurity EngineeringRisk ManagementCloud SecurityExecutive CommunicationTeam Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Register ManagementThreat ModelingSecure Software Development LifecycleSecurity Tooling AdoptionData Analysis and Reporting

Soft Skills

Sound JudgmentTrust BuildingCoaching and Development

Tools & Technologies

AI Coding ToolsReporting and Analytics Tools

Certifications & Qualifications

CISSPCISACISM

Industry Keywords

NIST Cybersecurity FrameworkCOSOFedRAMPSOXData Protection Regulations

Tech Stack

Tools & technologies

CloudCyber SecuritySDLC

About the role

Key responsibilities & impact

Own the security relationship for the assigned business unit
Represent the customer’s voice inside Enterprise Security and security’s voice inside customer leadership
Own the risk register, including severity, prioritization, buy-down sequencing, and risk-acceptance routing
Build resourced risk buy-down plans with owners and dates; hold teams accountable and escalate stalled progress
Lead security input on design reviews, threat models, and architecture decisions
Shape the SDLC, secure-by-design patterns, and platform guardrails
Deliver quarterly reviews, risk narratives, and posture metrics for CISO, CIO, and Board audiences
Engage security engineers, CSOC, technical program managers, and specialists to drive adopted enterprise outcomes
Track emerging AI/ML risks, including agentic architectures, prompt injection, and model and training-data governance
Incorporate compliance and regulatory requirements into risk prioritization with Legal, Privacy, and Compliance
Drive adoption of security tooling, telemetry, and automation
Manage, coach, and grow Security Partner Leads and Senior Leads
Set operating cadence and deliverable standards and develop successors
Use approved AI assistants to produce executive-quality analysis and drafts
Partner with Enterprise Security leadership on cross-portfolio strategy and enterprise-wide programs

Requirements

What you’ll need

12+ years of experience in cybersecurity engineering, IT risk, or a closely related field, including time in a large, complex enterprise
Experience serving as a BISO, Security Partner, or similar senior security leader accountable for a business unit or product line
Experience managing and developing security professionals and building high-performing teams
Deep technical knowledge of cloud, identity, application security, and AI/ML risks
Knowledge of COSO, NIST Cybersecurity Framework, and NIST SP 800-53
Knowledge of FedRAMP, SOX, and regional data protection regulations
Ability to prioritize risk and explain rationale to executives
Record of measurably improving security in a business unit or product organization
Executive-level written and verbal communication skills, including with CISO, CIO, and Board audiences
Sound judgment in deciding when to decide, escalate, or hold the line
Experience delivering in ambiguous, fast-moving environments and through M&A, reorganizations, and product launches
Experience turning data into leadership-ready narrative using reporting and analytics tools
Ability to build trust with senior technical and business leaders across distributed, cross-functional teams
Fluency with current AI coding and productivity tools
CISSP, CISA, CISM, or equivalent certification is an advantage
Experience in regulated industries is an advantage
Experience integrating acquired entities or divestitures into enterprise security programs is an advantage
Bachelor's degree in Computer Science, Engineering, Information Systems, Cyber Security, or a related field, or equivalent experience is an advantage

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Hybrid work arrangement
Incentive compensation, where applicable
Equity, where applicable
AI tools and resources to accelerate impact
Reasonable accommodation during the application or recruiting process