> Markdown version of [/jobs/ext/4586459-director-enterprise-security-business-information-security-officer-biso](https://www.wearedevelopers.com/jobs/ext/4586459-director-enterprise-security-business-information-security-officer-biso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director, Enterprise Security - Business Information Security Officer (BISO) - **Company:** Salesforce.com, Inc. - **Location:** McLean, VA, United States - **Experience:** Expert - **Salary:** $197,300 - $344,700 - **Contract:** Permanent contract - **Skills:** Adobe InDesign, Artificial Intelligence, Cloud Computing, Cyber Security, Information Systems, Data Governance, Software Design Patterns, Productivity Software, Systems Development Life Cycle, Software Engineering, Software Security, Information Technology - **Published:** November 5, 2026 - **Apply:** https://diversityjobs.com/career/18845041/Director-Enterprise-Security-Business-Information-Security-Officer-Biso-Virginia-Mclean ## About the Role * You have 12+ years of experience in cybersecurity engineering, IT risk, or a closely related field, including time in a large, complex enterprise. * You have served as a BISO, Security Partner, or similar senior security leader accountable for a business unit or product line. * You have managed and developed security professionals and built high-performing teams. * You have deep technical knowledge of cloud, identity, application security, and AI/ML risks, and can hold a substantive point of view in design reviews and threat models. * You know control frameworks such as COSO, NIST Cybersecurity Framework, and NIST SP 800-53, and regulations such as FedRAMP, SOX, and regional data protection. * You prioritize risk clearly and can explain what is the top risk and what is not worth fixing now, with rationale that holds up to executive scrutiny. * You have a record of measurably improving security in a business unit or product organization by closing findings, not just reporting them. * You communicate in writing and speaking at an executive level, including to CISO, CIO, and Board audiences. * You use sound judgment on when to decide, escalate, or hold the line, and you are comfortable challenging senior leaders. * You deliver in ambiguous, fast-moving environments and have experience with change events such as mergers and acquisitions (M&A), reorganizations, and product launches. * You turn data into leadership-ready narrative using reporting and analytics tools. * You build trust with senior technical and business leaders across distributed, cross-functional teams. * You are fluent with current AI coding and productivity tools. Even Better If... * You hold CISSP, CISA, CISM, or an equivalent certification. * You have experience in regulated industries such as technology, financial services, public sector, or healthcare. * You have integrated acquired entities or divestitures into enterprise security programs. * You have a bachelor's degree in Computer Science, Engineering, Information Systems, Cyber Security, or a related field, or equivalent experience ## Description * Enterprise Security is hiring a Director, Business Information Security Officer (BISO), also called a Security Partner. You are accountable for the security posture of major Enterprise Business Units (BUs) and serve as their primary link to the broader Security organization. * This is a senior technical leadership role. You read designs, understand the systems, and take clear positions on architecture, controls, and trade-offs with engineers, product leaders, and executives. * You lead a small team of Security Partners and are the trusted security go-to for your BU's senior technical and business leaders. * AI tools help you scale analysis and drafting, so you can focus on judgment and influence. * This role is based in NYC, NY; SF, CA; Denver, CO; Indianapolis, IN; Dallas, TX; or McLean, VA and is eligible for a hybrid work arrangement. What You'll Actually Be Doing * Own the security relationship for your assigned BU. Represent the customer's voice inside Enterprise Security and security's voice inside the customer's leadership. * Own the risk register. Set severity, prioritization, and buy-down sequencing, accounting for compensating controls. Route risk-acceptance decisions to the right executive owner. * Build resourced risk buy-down plans with named owners and dates, hold teams accountable, and escalate when progress stalls. * Lead security input on design reviews, threat models, and architecture decisions. Shape the software development lifecycle (SDLC), secure-by-design patterns, and platform guardrails early. * Deliver quarterly reviews, risk narratives, and posture metrics ready for Chief Information Security Officer (CISO), Chief Information Officer (CIO), and Board audiences. * Bring in security engineers, the Cyber Security Operations Center (CSOC), technical program managers, and other specialists at the right time to drive outcomes the enterprise adopts. * Track emerging risks in AI and machine learning (ML) systems, such as agentic architectures, prompt injection, and model and training-data governance. Turn them into concrete risk and control decisions. * Consider compliance and regulatory requirements (such as FedRAMP, Sarbanes-Oxley (SOX), and regional data-protection laws) into your risk view to drive security prioritization, partnering with Legal, Privacy, and Compliance. * Drive adoption of security tooling, telemetry, and automation so risk decisions rest on data. * Manage, coach, and grow Security Partner Leads and Senior Leads. Set the operating cadence and the bar for deliverables, and develop successors. * Use approved AI assistants to produce executive-quality analysis and drafts, and help your team do the same. * Partner with Enterprise Security leadership on cross-portfolio strategy and enterprise-wide programs.