Iain Mulholland named Chief Information Security Officer (CISO) at Salesforce

Salesforce has named Iain Mulholland as its Chief Information Security Officer. Mulholland has over 25 years of experience, having previously served in various leading positions at Google Cloud, VMware, MSRC, and other companies.

Salesforce says Mulholland, its EVP and Chief Information Security Officer, leads the company's product security and global cybersecurity strategy.

The company's author page says Mulholland was Chief of Staff to the CEO at VMware and Deputy Chief Information Security Officer at Google Cloud before joining Salesforce.

Salesforce, Inc. lists its address as Salesforce Tower on 415 Mission Street in San Francisco, according to the company. Salesforce says it organized its work into four areas meant to keep the platform that customers run their businesses on resilient against AI-speed threats. To reduce known security debt, Salesforce says, it re-triaged its entire backlog through the lens of AI-era exploitability. Salesforce says it introduced automated fix-and-deploy pipelines, removed approval bottlenecks from the critical path and redesigned its framework of remediation service level objectives. The company says it brought agentic AI systems into its Cybersecurity Operations Center as part of a shift from ticket-driven vulnerability management toward AI-driven, continuous vulnerability operations.

Salesforce states that it took part in Anthropic's Project Glasswing and signed the industry's 27 August call for collective action on cyber defence with more than 100 other companies, including Okta, Microsoft and AWS. Salesforce says it convened its inaugural CISO Summit in May 2026 at Salesforce Tower in San Francisco. The company says it shares its practices by convening CISOs and security leaders and through industry groups such as the ISACs.