BISO, Product Security

What you'll actually be doing

In this pivotal role for a BISO within the Product Security organization, you will lead security delivery for software-as-a-service (SaaS) and on‑premise services. Your focus will be on risk outcomes and maintaining customer trust through collaboration with product and engineering teams. You will prioritize, optimize, and track the execution of the security backlog for product engineering, using deep technical understanding and business risk impact.

• 10‑15 years of experience in information security, including 5‑10 years in a leadership role focused on technical security across cloud, infrastructure, applications, and third‑party integrations.
• Deep understanding of security principles across all tech layers, including cloud platforms (AWS, Azure, GCP), infrastructure security (network, endpoint, IAM), application security (SAST, DAST, secure coding), and third‑party risk management frameworks.
• Familiarity with security tools such as SIEM (Splunk), vulnerability scanners (Qualys, Nessus), and IAM solutions (Okta, SailPoint).
• Demonstrated ability to work independently, take ownership of security initiatives, and drive results with minimal supervision.
• Strong executive presence and ability to articulate technical security concepts in a business/risk context.
• Customer‑focused with a “get it done” attitude balanced by diplomacy and effective cross‑team collaboration.
• Ability to prioritize initiatives using risk data from multiple input sources and stay aligned with the bigger picture.
• Strong understanding of security and compliance frameworks (SOX, NIST CSF, ISO 27001/2, CIS Controls).
• Excellent communication skills to translate complex security concepts into business‑friendly language.
• Strong stakeholder‑management and collaboration skills to influence decision‑making without direct authority.
• Related technical degree required; advanced degrees a plus.

• Deep understanding of securing AI solutions.
• Prior experience as a BISO or equivalent role.
• Ability to cultivate strong working relationships with customer teams and international security teams.
• Strong willingness to challenge status quo and drive continuous improvement through change and new ideas.
• Track record of auditing, consulting, or security related experience in the high‑tech industry.
• Certifications such as CISM or CISSP highly desired.

• Competitive base salary range of $197,300 - $313,700 annually, plus potential incentive compensation, equity, and benefits.
• Time‑off programs.
• Medical, dental, vision, and mental health support.
• Paid parental leave.
• Life and disability insurance.
• 401(k) and employee stock purchasing program.
• Legal‑notice:
  Please see the company benefits link for more details.

Salesforce is an equal opportunity employer and maintains a policy of non‑discrimination with all employees and applicants for employment. We believe in equality for all and strive to create a workplace that is inclusive and free from discrimination. All employees and applicants will be assessed on merit, competence, and qualifications, without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or any other classifications protected by law.

This policy applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between.