Job Description

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Products and Technology

Job Details

Security is our 1 priority. Nothing is more important than the security of our service or customer data
The Salesforce Security Team is seeking an experienced enterprise security leader who will report to the VP of Enterprise Security. Enterprise security is critical to the success of Salesforce, Business Technology, and Salesforce employees. As a leader in the enterprise security team, you will strategically influence how we secure our enterprise in balance with the usability needs of our employee base. A successful candidate will be able to balance rapidly changing tactical needs with the ability to help drive strategic initiatives with the help of our partners in Business Technology. You and your team will be responsible for the following:

* * Deliver Third Party (Vendor/Supplier/Contractor/Service Provider) Security Assurance
* Author and execute strategic initiatives for Third Party in support of risk reduction for Key Risk Drivers
* Author and Maintain Third Party security standards and guidelines
* Conduct security assessments of Third Party vendors to determine security maturity, risk, regulatory/audit compliance
* Engage with third parties and internal business and technology teams for vendor reviews. Identify risks and propose both tactical and strategic enhancements
* Partner with Procurement and Legal to enhance current Third Party security agreements and review third party security agreement modification requests
* Partner with Procurement on Supplier Management System to maintain inventory and current security status of Third Party Vendors
* Partner with Enterprise Security Applications on Third Party application/service security assessments
* Partner with Incident Response on incidents that involve Third Party Security
* Interact with senior management through documentation and presentations on security assurance related matters
* Deliver security guidance concisely and clearly for Third Party security projects and activities

The successful candidate for this role will have the following minimum qualifications

* * Ten (10)+ years of experience working in a security-focused role in a large technology enterprise or other large enterprise in a technology-heavy industry (e.g., Financial Services)
* Four (4)+ years of experience in a senior security management role
* Experience with third party risk management, evaluating third party security maturity, and working with third parties on incident inquiry/remediation
* Adept at designing, implementing, and performing security assurance practices including threat modeling and vendor security reviews
* Strong cross functional leadership and team building skills
* Experience engaging with both third parties and internal customers regarding security
* Ability to prioritize and drive multiple work streams forward simultaneously
* Strong problem-solving and analytical skills
* Excellent verbal and written communication skills

The following additional qualifications are preferred

* * 4+ years of experience as a Security Director or Senior Manager leading high performing teams
* Previous experience leading a Third Party Security function
* Experience with supply chain risk management
* Knowledge of security controls, application, and infrastructure security vulnerabilities and mitigations
* Experience performing design review/code reviews/penetration tests
* Industry certifications- security (CISSP, CISM), pen testing certifications (OSCP, GPEN)

Education

Bachelor's Degree in related field preferred

Accommodations - If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at Salesforce and explore our benefits.

Salesforce.com and Salesforce.org are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce.com and Salesforce.org do not accept unsolicited headhunter and agency resumes. Salesforce.com and Salesforce.org will not pay any third-party agency or company that does not have a signed agreement with Salesfore.com or Salesforce.org.

Salesforce welcomes all.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.