Description
Enterprise Security is looking for a Senior Analyst to support our Business Information Security Officers (BISOs) in their day-to-day work with Enterprise business unit customers. BISOs drive measurable security improvements and own the health of the relationship between their business units and Enterprise Security. As a Senior Analyst, you work alongside BISOs to keep those engagements running smoothly — tracking risks and commitments, coordinating deliverables, and preparing materials for stakeholder reviews.
This role suits someone building on a solid cybersecurity foundation while working alongside experienced security professionals. You won't make independent architectural or risk-acceptance calls — those sit with the BISOs you support. You will make their work visible, actionable, and well-documented, and own the operational rhythm that keeps the team credible with its business unit customers.
What You'll Actually Be Doing
- Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates
- Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO
- Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction
- Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up
You're Our Person If...
- You have 3+ years of experience in consulting or a large corporate environment with a complex IT environment
- You have strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF))
- You can identify and articulate key security risks and develop controls to mitigate them
- You have experience implementing and testing security controls based on the NIST SP 800-53 standard
Even Better If...
- You've designed and implemented internal controls in response to identified risks
- You're experienced with data and reporting tools such as Tableau or Visio
- You hold a CISSP, CISA, PMP, or CISM certification
*LI-Y
Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.