Executive record
Iain Mulholland
Career profile: Iain Mulholland on CISO Spotlights ↗
Iain Mulholland is Chief Information Security Officer (CISO) at Salesforce. The appointment was announced in the week of February 9, 2026, per SecurityWeek Industry Moves.
Before the appointment: Deputy CISO at Google Cloud, per the same source.
1 tracked move on the Wire · Updated
Career timeline
Every move the record holds for Iain Mulholland, newest first, with the earlier roles the announcements name.
· Appointment
Named Chief Information Security Officer (CISO) at Salesforce
Source: SecurityWeek Industry Moves (week of 2026-02-09) ↗ · Move record
Before February 2026· Earlier role
Deputy CISO at Google Cloud
Named in the announcement of the Salesforce appointment · Source: SecurityWeek Industry Moves (week of 2026-02-09) ↗
The appointment
Announced week of February 9, 2026 · Source: SecurityWeek Industry Moves (week of 2026-02-09) ↗ · Move record
Salesforce has named Iain Mulholland as its Chief Information Security Officer. Mulholland has over 25 years of experience, having previously served in various leading positions at Google Cloud, VMware, MSRC, and other companies.
Salesforce says Mulholland, its EVP and Chief Information Security Officer, leads the company's product security and global cybersecurity strategy.
The company's author page says Mulholland was Chief of Staff to the CEO at VMware and Deputy Chief Information Security Officer at Google Cloud before joining Salesforce.
Salesforce, Inc. lists its address as Salesforce Tower on 415 Mission Street in San Francisco, according to the company. Salesforce says it organized its work into four areas meant to keep the platform that customers run their businesses on resilient against AI-speed threats. To reduce known security debt, Salesforce says, it re-triaged its entire backlog through the lens of AI-era exploitability. Salesforce says it introduced automated fix-and-deploy pipelines, removed approval bottlenecks from the critical path and redesigned its framework of remediation service level objectives. The company says it brought agentic AI systems into its Cybersecurity Operations Center as part of a shift from ticket-driven vulnerability management toward AI-driven, continuous vulnerability operations.
Salesforce states that it took part in Anthropic's Project Glasswing and signed the industry's 27 August call for collective action on cyber defence with more than 100 other companies, including Okta, Microsoft and AWS. Salesforce says it convened its inaugural CISO Summit in May 2026 at Salesforce Tower in San Francisco. The company says it shares its practices by convening CISOs and security leaders and through industry groups such as the ISACs.
The company: Salesforce
- Sector
- Technology
- Region
- North America
- Company record
- Who runs security at Salesforce: 1 confirmed move on the record
- Annual report
- Cybersecurity section of the fiscal 2026 Form 10-K, filed March 2, 2026
- Reporting line
- The filing describes the role that runs security as Chief Information Security Officer, reporting to the CITO.
- Board oversight
- Named in the filing: Cybersecurity and Privacy committee.
In their own words
What Iain Mulholland has posted and written in public while in the seat, each described in our words with a link to the original. A post loads from LinkedIn or X only when you choose Show post. All voices
Elsewhere
Public profiles we matched to Iain Mulholland by exact name and the company on our record. Links only; we do not copy from them.
Appointed in the same period
Other security chiefs in Technology whose appointment was announced within 90 days of Iain Mulholland's, nearest first (8 of 13). The Technology bench
Ken Ricketts, Chief Information Security Officer at Teradata
Latha Maripuri, Chief Information Security Officer at Nscale
Peter Liebert, Chief Information Security Officer at Clari + Salesloft
Kathy Wang, Chief Information Security Officer at micro1
Roland Palmer, Chief Information Security Officer (CISO) and Vice President of Security at JumpCloud
Leslie Kershaw, Chief Information Security Officer at IonQ
Eric Zielinski, Chief Information Security Officer at Jumpmind
Jayesh Bhatt, Chief Information Security Officer at Netcore
Record facts
- Time in the seat
- About 9 months since the appointment was announced (week of February 9, 2026), as of November 2026
- Moves on the record
- 1 confirmed move, each with its source
- On the record since
- September 24, 2026
How these are counted. Time in the seat: Counted in whole months from the announcement of the appointment, the date the record holds; announcements rarely give a start date.
Questions about Iain Mulholland
- Who is the CISO of Salesforce?
- Iain Mulholland is Chief Information Security Officer (CISO) at Salesforce. The appointment was announced in the week of February 9, 2026, per SecurityWeek Industry Moves.
- When did Iain Mulholland become CISO of Salesforce?
- The appointment was announced in the week of February 9, 2026, per SecurityWeek Industry Moves. The record holds the announcement, not a start date.
- Where did Iain Mulholland work before Salesforce?
- Before the appointment, Iain Mulholland was Deputy CISO at Google Cloud, according to the announcement (SecurityWeek Industry Moves).
- Who does the head of security at Salesforce report to?
- In its fiscal 2026 annual report (Form 10-K, filed March 2, 2026), Salesforce describes the role that runs security as Chief Information Security Officer, reporting to the CITO.
Sources
- 1.SecurityWeek Industry Moves (week of 2026-02-09) ↗: the appointment at Salesforce, week of February 9, 2026
- 2.SEC EDGAR: Form 10-K, fiscal 2026 ↗: the company's cybersecurity disclosure
- 3.CISO Spotlights career profile ↗: a fuller career profile on a sister site
This record begins with CISO Tribune's tracking in 2026.
Related guides
CISO Podcasts: The Shows That Interview Sitting Security Leaders
Four active podcasts interview sitting CISOs: CISO Series Podcast, Defense in Depth, The New CISO and Risky Business Features. Hosts, cadence, sponsors.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.
How to Become a CISO: Career Path, Experience and Certifications
There is no CISO degree and no single route to the seat. What the certification bodies, career guides and CISO Tribune's own record show about the path: typical prior roles, the certifications that actually come up, and how long it takes.