Application Security Program Manager
New
J
JobgetherApplication security
Based in the United States, Eastern or Central time zoneContractManager
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 8–10 years of experience in leadership, cybersecurity program management, organizational change, or related roles
- Required Skills
- Stakeholder management
Requirements
- Bring 8–10 years of experience in leadership, cybersecurity program management, organizational change, or related roles.
- Demonstrate a track record of improving application security program maturity.
- Have experience managing complex technology, cybersecurity, or application security programs across multiple teams.
- Understand the Secure Software Development Lifecycle (SSDLC), including implementing, operationalizing, or governing secure development practices across multiple teams.
- Have working knowledge of application security and software delivery concepts, including security requirements, code and dependency scanning, vulnerability management, remediation workflows, and risk treatment.
- Demonstrate stakeholder management and organizational change leadership skills, including coordinating competing priorities.
- Have experience establishing repeatable processes, defining responsibilities, measuring performance, and using data and feedback for continuous improvement.
- Be able to facilitate and communicate technical and policy issues as clear actions, ownership, decisions, and management reporting.
- Be able to work independently, navigate complex stakeholder environments, identify barriers, and maintain accountability.
- Relevant certifications or training in code scanning and dependency scanning are preferred.
- Must reside in the Eastern or Central time zone to meet remote work requirements.
Responsibilities
- Coordinate the transition from project-based deliverables to sustainable application security processes with documented handoffs, decision-making pathways, service expectations, and operating routines.
- Maintain the program roadmap, priorities, dependencies, risks, and continuous improvement backlog.
- Collaborate with security, development, infrastructure, platform, and governance teams on risk assessments, security requirements, design reviews, scanning, vulnerability triage, remediation, exceptions, and release workflows.
- Plan phased rollouts with development and platform teams, supporting security champions, developer training, office hours, and practical security guidance.
- Gather stakeholder feedback, identify adoption barriers, and drive consistent implementation of security practices across applications, tools, and vendor environments.
- Help development and product teams establish risk-prioritized remediation plans with clear ownership, deadlines, and evidence of resolution.
- Monitor application coverage gaps, aging vulnerabilities, blockers, and escalations while coordinating remediation and verification.
- Facilitate cross-functional working groups and leadership reviews, clarify responsibilities, and route technical design questions and policy or risk decisions to the appropriate authorities.
- Define program metrics with data owners and coordinate reporting on coverage, adoption, remediation progress, exceptions, and control effectiveness.
- Analyze performance trends, recommend improvements, and coordinate related initiatives involving repository governance, security tools, platform integration, third-party application security, and developer enablement.
View Full Description & ApplyYou'll be redirected to the employer's site
