Information Security & Compliance Manager

Job description

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Enterprise Technology & Infrastructure Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. Background As Salesforce adoption grows across regulated industries and the public sector in Australia, customers want more than a description of our security posture. They want a technical Salesforce security counterpart who can design, configure and show the controls that protect their data on the platform. The Manager – Office of the CISO sits within Salesforce's Global Office of the CISO function. It is the hands-on technical voice of Salesforce Security in the region. The role connects our trust posture with how customers actually implement it, turning security, privacy, resilience and compliance commitments into architectures, configurations and evidence that customer CISOs, architects, auditors and regulators can rely on. Role This is a customer-facing technical role and an individual contributor position with no direct reports. The successful candidate will spend much of their time with customer security and architecture teams, both whiteboarding and inside the platform. They will design secure Salesforce architectures, configure and demonstrate security controls, and work with the Trust & Security Advisors, Solution Engineers and Technical Architects on strategic deals and implementation Security Architecture & Advisory (primary) Lead platform security and security architecture discussions and work with enterprise architects and security engineering teams across enterprise, financial services, critical infrastructure and public-sector accounts. Design and document secure reference architectures foridentity, data protection, network connectivity,integration security, logging and monitoring, resilience, and AI/agent security. Map customer security requirements and regulatory obligations, platform controls, configurations and shared-responsibility boundaries. Find gaps between a customer's current security posture on Salesforce, and recommend a practical, prioritised roadmap to close them. Platform Security Controls: Hands-on Configuration & Demonstration Configure, demonstrate and build proofs-of-concept for Salesforce security capabilities, including Identity & Access: SSO (SAML, OpenID Connect), OAuths / External Client Apps, session and login policies, IPrestrictions, permission set and profile design, and least-privilege models Data Security: Sharing and visibility architecture, Platform Encryption (including BYOK and cache-only keys), Data Mask, Data Detect and classification. Monitoring & Detection: Event Monitoring, Real-Time Dections, Security Policies, Field Audit Trail, Security Center and Health Check Infrastructure & Connectivity: Hyperforce (including Private Connect, mTLS, and certificate and key management. AI Security: The Einstein / Agentforce Trust Layer, agent permissions and guardrails, prompt and data-grounding controls, and audit AI interactions. Build reusable demo orgs, configuration playbooks, security baselines and hardening guides that the field and partners can use at scalReview customer org configurations against security be expectations, and give clear remediation guidance. Pre-Sales & Field Enablement Act as the technical security SME on strategic opportunities, discovery sessions and technical validation alongside Solution Engineers and Account teams Serve as the escalation point for complex technical questionnaires, tender/RFP responses and regulated-customer due diligence, especially architecture, encryption, identity, logging and integration security Train Solution Engineers, Technical Architects, Professional Services on secure design patterns and platform security capabilities. Product Feedback & Thought Leadership Consolidate customer technical requirements and feed them into security product roadmap with Product Management and Engineering. Contribute to technical collateral: reference architectures, whitepapers, best-practice guides, blogs, and conference and customer-summit sessions. Support the Trust & Security Advisors and Government Affairs with technical input on industry and government consultations covering privacy, cyber security, operational resilience and AI Required Skills & Experience Bachelor's degree (or equivalent experience) and 8 –1 3 years in information , security architecture or security engineering,including significant hands-on design and implementation work in customer-facing or consulting roles Hands-on security architecture. Proven experience in designing enterprise architectures across identity, data protection , network, integration and logging domains, with architecture diagrams and design documents to show for it . Identity & Access Management. Deep practical knowledge of SAML, OAuth, OpenID Connect, MFA, federation and privileged access patterns, and how to configure them securely Data protection. Hands-on experience with encryption a management (KMS/HSM, BYOK/HYOK), TLS/mTLS, PKI, data masking and data classification Platform security configuration. Experience configuring SaaS or cloud platforms (Salesforce strongly preferred; ServiceNow, Microsoft 365/Entra, Workday or similar also relevant), including role and permission models, sharing and visibility, and audit logging. Cloud security. Fluency in AWS, GCP and/or Azure security architectures and native controls: IAM, VPC/private connectivity, KMS, CloudTrail and equivalents. Detection & response. Hands-on experience with SIEM tooling (Splunk, Google Chronicle/SecOps, Microsoft Sentinel or similar), log analysis and incident investigation. Application & integration security. Solid understanding of API security, OWASP Top 10, OWASP API Top 10, secure coding practices, and how to interpret penetration test and vulnerability assess Working knowledge of industry security and compliance frameworks (e.g., NIST, ISO 27001 family, SOC 2, PCI-DSS, CSA STAR), and the ability to map technical controls to them. Understanding of the Australian regulatory landscape for privacy, cyber security, operational resilience and government security, and how those requirements translate into technical controls. Excellent communication and executive presence. Able to explain complex architecture to a CISO and then go deep on configuration with their engineering team, on live calls and in workshops Strong team player who works well across Product, Engineering, Field, Legal, Privacy and Partners. Desired Skills & Experience Hands-on Salesforce platform experience: Org/Sandbox management, Shield (Platform Encryption, Event Monitoring, Field Audit Trail), Security Center, Hyperforce, Private Connect, and familiarity with Apex, Flows, and integration patterns. Salesforce certifications such as Identity and Access Management Architect, Sharing and Visibility Architect, Security & Privacy, Accredited Professional, Platform Administrator, Application/Systems Architect or a willingness to earn them after joining. Security certifications such as CISSP, CCSP, CCSK, OSCP, AWS/GCP/Azure Security Specialty, or SANS/GIAC Experience securing AI and LLM workloads: prompt injections, data leakage, agent permissions, and AI governance frameworks. Prior pre-sales, solution engineering or security consulting experience with large enterprise, financial services, critical infrastructure or public-sector customers in Australia. Experience supporting government security assessments or public-sector procurement processes. Practical use of AI tools (e.g., Claude, Copilot, Cursor documentation, configuration review and log analysis. Experience speaking at industry conferences or publishing technical security content. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best , and our AI agents accelerate your impact so you can do your best . Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form . Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.