Enterprise Technology Risk Management and Information Security, Manager

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Enterprise Technology & Infrastructure

Job Details

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM+Trust. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place!

About Our Team

Salesforce's Enterprise Security and Business Technology team is at the forefront of enterprise IT, focusing on collaboration with business partners to achieve outstanding outcomes. We lead technology strategy, Salesforce on Salesforce, customer and partner enablement, applications engineering, infrastructure, collaboration, enterprise operations, architecture, and program enablement.

We are seeking a dedicated and dynamic Risk Management and Information Security Manager to join our Enterprise Technology Risk Management team. This role involves advising partners on control design, process improvements, and implementing information security controls within various compliance frameworks. 

The ideal candidate will motivate change, lead readiness and process/control improvement initiatives, communicate and support recommendations effectively, and influence action in a multi-functional environment. Strong business and information security competence, a consistent track record in advising on control design and process improvements, and the ability to transform business knowledge into scalable solutions are needed! 

Impact - Responsibilities 

• Lead the execution of all phases within a system readiness lifecycle, ensuring timely delivery and quality work.

• Play a crucial role in supporting our mission to leverage AI tools while maintaining the highest standards of trust and security on our internal data platforms.

• Support a changing organization, advise on process improvement through a compliance and information security lens - we are strategic advisors to the Business Technology organization, and beyond!

• Work with current functional teams within the organization to review current processes and identify risk areas and areas for improvement and design controls around these to reduce risk and exposure to avoid operation surprises

• Supervise functional teams for compliance to outlined processes and ensure that all key controls are being performed satisfactorily

• Work effectively in a dynamic, high performance environment - comfortable in multi-functional roles and skilled in partner alignment

• Support/implement Information Security/Compliance/SOX readiness initiatives for emerging areas [e.g., acquisitions and system implementations]

• Experience designing, implementing, and testing internal controls in response to identified risks

Minimum Qualifications

• Bachelor's degree in IT, Computer Science or related field

• 6+ years of experience on large-scale internal control implementations and testing of Enterprise Data management systems

• Demonstrable experience in developing and implementing data classification schemes to categorize data based on sensitivity and criticality. Skilled in establishing and enforcing data classification policies and controls to ensure robust data security

• Solid background in Information Security, IT SOX, SOC and/or process improvement

• Ability to influence, interact and partner optimally with multi-functional and remote teams

• Excellent org