Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Director, Enterprise Security - Business Information Security Officer (BISO) role.

Rezi rewrites your resume against Salesforce's job description. Free.

Tailor your resume to this Director, Enterprise Security - Business Information Security Officer (BISO) role.

Rezi rewrites your resume against Salesforce's job description. Free.

Tailor my resume

Don't guess if your resume is good enough.

See how it scores against the Director, Enterprise Security - Business Information Security Officer (BISO) posting at Salesforce — free, in seconds.

Don't guess if your resume is good enough.

See how it scores against the Director, Enterprise Security - Business Information Security Officer (BISO) posting at Salesforce — free, in seconds.

Get my score

About the Role

Salesforce is seeking a Director, Business Information Security Officer (BISO), also known as a Security Partner. This senior technical leadership role is accountable for the security posture of major Enterprise Business Units (BUs) and acts as the primary link between BUs and the broader Security organization. The role involves analyzing designs, understanding systems, and making clear positions on architecture, controls, and trade-offs with various stakeholders. You will lead a small team of Security Partners and serve as the trusted security advisor for your BU’s senior technical and business leaders. AI tools will assist in scaling analysis and drafting, allowing focus on judgment and influence.

Responsibilities

• Own the security relationship for your assigned BU, representing the customer's voice within Enterprise Security and security's voice within the customer's leadership.
• Own the risk register, setting severity, prioritization, and buy-down sequencing, accounting for compensating controls, and routing risk-acceptance decisions to the appropriate executive owner.
• Build resourced risk buy-down plans with named owners and dates, hold teams accountable, and escalate when progress stalls.
• Lead security input on design reviews, threat models, and architecture decisions, shaping the software development lifecycle (SDLC), secure-by-design patterns, and platform guardrails early.
• Deliver quarterly reviews, risk narratives, and posture metrics suitable for Chief Information Security Officer (CISO), Chief Information Officer (CIO), and Board audiences.
• Engage security engineers, the Cyber Security Operations Center (CSOC), technical program managers, and other specialists to drive enterprise adoption of outcomes.
• Track emerging risks in AI and machine learning (ML) systems, such as agentic architectures, prompt injection, and model and training-data governance, translating them into concrete risk and control decisions.
• Incorporate compliance and regulatory requirements (e.g., FedRAMP, SOX, regional data-protection laws) into the risk view to drive security prioritization, in partnership with Legal, Privacy, and Compliance.
• Drive adoption of security tooling, telemetry, and automation to ensure risk decisions are data-driven.
• Manage, coach, and grow Security Partner Leads and Senior Leads, setting operating cadence and deliverable standards, and developing successors.
• Utilize approved AI assistants to produce executive-quality analysis and drafts, and guide your team in doing the same.
• Partner with Enterprise Security leadership on cross-portfolio strategy and enterprise-wide programs.

Requirements

• 12+ years of experience in cybersecurity engineering, IT risk, or a closely related field, including experience in a large, complex enterprise.
• Served as a BISO, Security Partner, or similar senior security leader accountable for a business unit or product line.
• Managed and developed security professionals and built high-performing teams.
• Deep technical knowledge of cloud, identity, application security, and AI/ML risks, with the ability to hold a substantive point of view in design reviews and threat models.
• Familiarity with control frameworks such as COSO, NIST Cybersecurity Framework, and NIST SP 800-53, and regulations such as FedRAMP, SOX, and regional data protection.
• Ability to clearly prioritize risk and articulate rationale for top risks and non-critical issues to executive scrutiny.
• Proven record of measurably improving security in a business unit or product organization by closing findings.
• Executive-level written and verbal communication skills, including presentations to CISO, CIO, and Board audiences.
• Sound judgment in decision-making, escalation, and holding firm on principles, with comfort in challenging senior leaders.
• Experience delivering results in ambiguous, fast-moving environments and managing change events like mergers and acquisitions (M&A), reorganizations, and product launches.
• Ability to transform data into leadership-ready narratives using reporting and analytics tools.
• Skill in building trust with senior technical and business leaders across distributed, cross-functional teams.
• Fluency with current AI coding and productivity tools.

Skills

• Cybersecurity engineering
• IT risk management
• Cloud security
• Identity management
• Application security
• AI/ML risk assessment
• Control frameworks (COSO, NIST Cybersecurity Framework, NIST SP 800-53)
• Regulatory compliance (FedRAMP, SOX, data protection laws)
• Risk prioritization
• Executive communication
• Data analysis and reporting
• AI coding tools
• AI productivity tools

Location

• NYC, NY
• SF, CA
• Denver, CO
• Indianapolis, IN
• Dallas, TX
• McLean, VA

Work Type

• Hybrid

Experience Level

• 12+ years of experience
• Senior technical leadership

Education Level

• Bachelor's degree in Computer Science, Engineering, Information Systems, Cyber Security, or related field, or equivalent experience
• CISSP, CISA, CISM, or equivalent certification (preferred)

Salary/Compensations

• $197,300 - $313,700 annually (standard)
• $237,700 - $344,700 annually (select SF/NYC metro areas)

Benefits

• Time off programs
• Medical insurance
• Dental insurance
• Vision insurance
• Mental health support
• Paid parental leave
• Life insurance
• Disability insurance
• 401(k)
• Employee stock purchasing program

About the Company

• Salesforce is the #1 AI CRM, where humans with agents drive customer success together.
• The company fosters a culture where ambition meets action, tech meets trust, and innovation is a way of life.
• Salesforce is leading workforce transformation in the agentic era and is committed to bettering business and the world through AI and innovation, guided by core values.

Equal Opportunity

• Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment.
• The company believes in equality for all and strives to create an inclusive workplace free from discrimination.
• All individuals will be assessed on merit, competence, and qualifications without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law.
• This policy applies to all employment aspects, including recruiting, hiring, job assignment, compensation, promotion, benefits, training, performance assessment, discipline, and termination.
• Recruiting, hiring, and promotion decisions are fair and based on merit.
• Salesforce will consider for employment qualified applicants with arrest and conviction records in accordance with the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring.