Enterprise Security Senior Analyst, Security Partner

Salesforce•Bellevue, NY

11d

About The Position

Enterprise Security is looking for a Senior Analyst to support our Business Information Security Officers (BISOs) in their day-to-day work with Enterprise business unit customers. BISOs drive measurable security improvements and own the health of the relationship between their business units and Enterprise Security. As a Senior Analyst, you work alongside BISOs to keep those engagements running smoothly — tracking risks and commitments, coordinating deliverables, and preparing materials for stakeholder reviews. This role suits someone building on a solid cybersecurity foundation while working alongside experienced security professionals. You won't make independent architectural or risk-acceptance calls — those sit with the BISOs you support. You will make their work visible, actionable, and well-documented, and own the operational rhythm that keeps the team credible with its business unit customers.

Requirements

3+ years of experience in consulting or a large corporate environment with a complex IT environment
Strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF))
Can identify and articulate key security risks and develop controls to mitigate them
Experience implementing and testing security controls based on the NIST SP 800-53 standard

Nice To Haves

Designed and implemented internal controls in response to identified risks
Experienced with data and reporting tools such as Tableau or Visio
Hold a CISSP, CISA, PMP, or CISM certification

Responsibilities

Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates
Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO
Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction
Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up