Senior Director, Software Engineering

Salesforce•San Francisco, CA

1d•$218,400 - $401,400

About The Position

The Senior Director leads governance for MuleSoft, providing unified leadership across Security Engineering, Compliance, and MS SWAT for MuleSoft Gov Cloud and On-Prem products. The role sets strategy, priorities, and capacity trade-offs across these functions while their teams’ management chains handle day-to-day execution. It drives compliance operations and certification coverage across MuleSoft’s global regions and serves as MSGov ISSO, with primary accountability to authorizing officials and auditors for the security and compliance posture of the MS Gov Cloud system. The position owns cross-team risk identification, treatment, and remediation; represents MuleSoft’s risk and compliance posture in external-facing commitments; and directs security and compliance programs. It also sets the direction for cloud financial governance across AWS, Azure, and GCP, partnering with Engineering and Product leadership on budgeting and spending accountability. The role sponsors automated compliance tooling, supports audit readiness, and oversees vulnerability management, continuous monitoring, and operational execution for Gov Cloud and On-Prem products. The leader oversees MS Security Engineering, MS Compliance, MS SWAT, and Oversight Engineering. Their remit includes security engineering programs, certification strategy and maintenance, control attestation and audit preparation, Gov Cloud change execution and operational coverage, and cloud cost and budget reporting and tooling.

Responsibilities

Provide unified leadership across Security Engineering, Compliance, and Site Reliability Engineering for MS Gov Cloud, connecting risk signals, patterns, and treatment decisions across teams.
Track leadership observations and improvement areas for direct-report teams, including problem areas, hygiene automation, and sustainability, while team leads retain day-to-day leadership.
Direct Security Engineering programs covering identity and access, network security, continuous monitoring, and product security; set priorities and capacity trade-offs.
Serve as MSGov ISSO and own the MS Gov Cloud system’s security posture, including maintaining the System Security Plan, assessing risk on system changes, ensuring continuous monitoring and vulnerability remediation meet FedRAMP requirements, and serving as primary accountability point for authorizing officials and auditors.
Drive compliance operations for MuleSoft products across AUS, IA, CA, EU, JA, US, and US Gov regions.
Ensure compliance across 25+ certifications spanning commercial, government, and industry frameworks, including SOC, PCI, HIPAA, ISO, FedRAMP, Protected B, ISMAP, IRAP, CJIS, HiTRUST, C5, and DOD/IL.
Set MuleSoft’s cloud financial governance strategy for cost visibility, budget planning, and anomaly detection across AWS, Azure, and GCP; partner with Engineering and Product leadership on annual budgets and spend accountability.
Sponsor automated compliance tooling, including evidence and artifact collection, Key Rotation Monitoring, and STIG compliance tooling, to reduce audit fatigue.
Review and negotiate formal risk and compliance language for external-facing commitments with engineering leadership, Salesforce Security, sales, and account executives.
Ensure vulnerability management for MS Gov Cloud and On-Prem products; prioritize continuous monitoring operations and drive proactive mitigation of trending vulnerabilities.
Partner with the Salesforce Business Information Security Officer to lead MuleSoft engineering’s Risk Management program and maintain processes to identify, track, report, and reduce security risk.
Set the compliance engineering function’s strategy and roadmap for certification maintenance and expansion, embedding compliance requirements into products and services from the outset.
Ensure centralized, consistent control attestation and audit readiness through proactive preparation, evidence collection, and remediation tracking.
Direct MS SWAT’s operational execution model for MS Gov Cloud, including change case approval and execution, on-duty coverage, and maintenance and release windows.
Advance cost and infrastructure tooling, including Cloud Central Portal and Cost Anomaly Detection, toward a proactive model that surfaces savings opportunities and infrastructure insights to service teams.
Oversee cloud cost and budget reporting, annual budget planning across Engineering and Product, and operation of the Cloud Central Portal and Cost Anomaly Detection Tool.