Application Security Program Manager
New
S
State of Maine Office of TechnologyApplication security
Applicants are able to work remotely provided they reside in the EST or CST time zones, EST or CSTContractManager
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 8 to 10 years of experience in leadership roles and cybersecurity program management, and change agent roles, improving application security program maturity.
- Required Skills
- Stakeholder management
Requirements
- Have 8 to 10 years of experience in leadership roles, cybersecurity program management, and change agent roles improving application security program maturity.
- Bring experience improving application security program maturity.
- Have stakeholder management and organizational change management leadership experience.
- Understand the Secure Software Development Lifecycle (SSDLC).
- Have substantial experience managing complex technology, cybersecurity, or application security programs across multiple teams.
- Demonstrate delivery through influence and shared accountability.
- Have working knowledge of software delivery and application security concepts, including security requirements, code and dependency scanning, vulnerability management, remediation, and risk treatment.
- Be able to translate technical and policy issues into clear actions, owners, decisions, and management reporting.
- Have experience establishing repeatable processes, coordinating organizational change, using measures to improve performance, and managing competing priorities.
- Have experience implementing, operationalizing, or governing SSDLC practices across multiple development teams.
- Code and dependency scanning certification is preferred.
- Strong facilitation, writing, and stakeholder communication skills are preferred.
Responsibilities
- Coordinate the transition from project deliverables to owned processes, with documented handoffs, decision paths, service expectations, and operating cadence.
- Maintain the program roadmap, priorities, dependencies, risks, and improvement backlog.
- Work with accountable teams to improve application risk profiles and security requirements, design review, scanning, finding triage, remediation, exception, and release workflows.
- Plan rollout waves with development and platform partners, and support security champions, training, office hours, and developer-facing guidance.
- Help product and development teams turn findings into risk-ranked plans with owners, target dates, and closure evidence.
- Track coverage gaps, aging findings, blockers, and escalations while responsible teams perform remediation and verification.
- Facilitate working groups and leadership reviews, maintain the responsibility model, and route design, policy, exception, and risk decisions to the appropriate owners.
- Coordinate reporting on application coverage, adoption, remediation, exceptions, and control performance; use trends and feedback to propose changes and adjust priorities.
- Coordinate related initiatives in repository governance, security tooling, platform integration, third-party application security, and developer enablement.
View Full Description & ApplyYou'll be redirected to the employer's site
