Information Security & Compliance Manager

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Background

As Salesforce adoption grows across regulated industries and the public sector in Australia, customers want more than a description of our security posture. They want a technical Salesforce security counterpart who can design, configure and show the controls that protect their data on the platform. The Manager - Office of the CISO sits within Salesforce's Global Office of the CISO function. It is the hands-on technical voice of Salesforce Security in the region. The role connects our trust posture with how customers actually implement it, turning security, privacy, resilience and compliance commitments into architectures, configurations and evidence that customer CISOs, architects, auditors and regulators can rely on.

Role

This is a customer-facing technical role and an individual contributor position with no direct reports. The successful candidate will spend much of their time with customer security and architecture teams, both whiteboarding and inside the platform. They will design secure Salesforce architectures, configure and demonstrate security controls, and work with the Trust & Security Advisors, Solution Engineers and Technical Architects on strategic deals and implementation.

• Security Architecture & Advisory (primary)
• Lead platform security and security architecture discussions and work with enterprise architects and security engineering teams across enterprise, financial services, critical infrastructure and public-sector accounts.
• Design and document secure reference architectures for identity, data protection, network connectivity, integration security, logging and monitoring, resilience, and AI/agent security.
• Map customer security requirements and regulatory obligations, platform controls, configurations and shared-responsibility boundaries.
• Find gaps between a customer's current security posture on Salesforce, and recommend a practical, prioritised roadmap to close them.

• Platform Security Controls: Hands-on Configuration & Demonstration
• Configure, demonstrate and build proofs-of-concept for Salesforce security capabilities, including:
• Identity & Access: SSO (SAML, OpenID Connect), OAuths / External Client Apps, session and login policies, IP restrictions, permission set and profile design, and least-privilege models.
• Data Security: Sharing and visibility architecture, Platform Encryption (including BYOK and cache-only keys), Data Mask, Data Detect and classification.
• Monitoring & Detection: Event Monitoring, Real-Time Detections, Security Policies, Field Audit Trail, Security Center and Health Check.
• Infrastructure & Connectivity: Hyperforce (including Private Connect, mTLS, and certificate and key management).
• AI Security: The Einstein / Agentforce Trust Layer, agent permissions and guardrails, prompt and data-grounding controls, and audit AI interactions.
• Build reusable demo orgs, configuration playbooks, security baselines and hardening guides that the field and partners can use at scale.
• Review customer org configurations against security expectations, and give clear remediation guidance.

• Pre-Sales & Field Enablement
• Act as the technical security SME on strategic opportunities, discovery sessions and technical validation alongside Solution Engineers and Account teams.
• Serve as the escalation point for complex technical questionnaires, tender/RFP responses and regulated-customer due diligence, especially architecture, encryption, identity, logging and integration security.
• Train Solution Engineers, Technical Architects, Professional Services on secure design patterns and platform security capabilities.

• Product Feedback & Thought Leadership
• Consolidate customer technical requirements and feed them into security product roadmap with Product Management and Engineering.
• Contribute to technical collateral: reference architectures, whitepapers, best-practice guides, blogs, and conference and customer-summit sessions.
• Support the Trust & Security Advisors and Government Affairs with technical input on industry and government consultations covering privacy, cyber security, operational resilience and AI.

Required Skills & Experience

Bachelor's degree (or equivalent).