Enterprise Security Partner (Multiple Levels), Salesforce

• You have 3+ years experience in cybersecurity, IT risk, or a closely related discipline within a large, complex enterprise or consulting environment (years of experience commensurate with the level you're applying for)
• You have a strong understanding of security control methodologies and frameworks (e.g., COSO, NIST CSF, NIST SP 800-53) and know how to translate them into business-relevant risk
• You bring a sharp, defensible technical point of view, backing your positions with specifics rather than generalities, and prioritize risk with clarity and conviction
• You communicate clearly in writing and verbally, skilled at building trust with cross-functional and remote stakeholders, and are comfortable operating under ambiguity and tight deadlines

Desirable

• Our Enterprise Security organization is looking for Security Partner professionals spanning multiple levels to work directly with leadership within enterprise Business Units (BU). BISOs/security partners are accountable for driving measurable security improvements over time and for the health of the relationship between enterprise BU and Security
• We're hiring across the Security Partner career path: from Senior Analysts building foundational operational and analytical skills, through Leads and Senior Leads developing independent technical judgment
• Maintain a current, prioritized risk register for your BU, weighing compensating controls and confidently distinguishing top risks from lower priorities, with final risk-call authority at senior grade levels
• Engage deeply with your BU's architecture and lead security design reviews and threat models, advocating well-reasoned security positions, with greater independence at senior grade levels. Achieve this using AI tooling (e.g., Claude Code, Cursor, or similar) to accelerate analysis while applying sound judgment on when outputs need further human review
• Provide your BU with the right security expertise and represent the BU's voice in security forums, with growing ownership at senior levels
• Drive risk remediation plans and bug closure to completion — sequencing the highest-impact work first and establishing clear ownership and accountability