Iain Mulholland

Iain Mulholland is executive vice president and chief information security officer at Salesforce, where the company's own blog says he leads its global cybersecurity and product security strategy. SecurityWeek's industry-moves roundup for the Week of February 9, 2026 recorded Salesforce naming him to the post, describing him as Google Cloud's former deputy CISO.

Career path

Before Salesforce, Mulholland served as deputy chief information security officer at Google Cloud and as chief of staff to the CEO at VMware. SecurityWeek's account credits him with more than 25 years of experience overall and adds that he also held leading positions at Microsoft's MSRC, the Microsoft Security Response Center, among other employers.

Responding to AI-accelerated attacks

Writing under his own byline on the Salesforce blog, Mulholland described re-triaging the security team's entire backlog of known issues through what he called an AI-era exploitability lens, then rebuilding the company's remediation process around the faster pace of AI-assisted attacks. The same post says Salesforce now uses frontier models, naming Claude Mythos, OpenAI's GPT-5.5-Cyber and Google's CodeMender, to help its security team find and patch vulnerabilities in the platform before attackers can.

Mulholland also wrote that Salesforce convened its first CISO Summit at Salesforce Tower in San Francisco in May 2026, an event aimed at sharing defensive practices with other security leaders. He framed the underlying approach as a shared one, arguing that organizations able to pass on hard-earned defensive experience should do so for the benefit of the wider security community.

The sources reviewed do not give an exact day in February 2026 for his appointment, only the week SecurityWeek reported it, and they do not detail his responsibilities before the Google Cloud deputy-CISO post.