Job Description
Job DescriptionWe are looking for an experienced application security program leader to guide enterprise-wide security initiatives for a Long-term Contract position. This role partners with technology, security, and business teams to strengthen secure development practices, improve risk visibility, and support consistent adoption across a complex environment. The ideal candidate brings strong program leadership, stakeholder engagement, and organizational change management experience to help strengthen application security capabilities in a practical and sustainable way.
Responsibilities:
• Lead cross-functional application security initiatives by aligning stakeholders, priorities, timelines, and measurable outcomes across security, development, platform, and business teams.
• Oversee the evolution of secure software development practices by establishing clear ownership, decision paths, service expectations, and repeatable operating routines.
• Manage the program roadmap by tracking dependencies, open risks, improvement opportunities, and progress against strategic objectives.
• Partner with accountable teams to strengthen workflows related to security requirements, design assessments, application scanning, issue triage, remediation planning, exception handling, and release readiness.
• Coordinate adoption efforts with development and platform groups through phased rollout plans, developer enablement, training sessions, office hours, and practical implementation guidance.
• Gather stakeholder feedback, identify operational barriers, and drive actions that improve usability, accountability, and program effectiveness.
• Monitor reporting and performance indicators to evaluate program progress, highlight trends, and support leadership decision-making.
• Collaborate with internal teams and external vendors to ensure application security practices align with governance expectations, tool usage, and delivery models.
• Escalate unresolved issues and key decisions to the appropriate owners while maintaining momentum and follow-through across participating groups.• 8+ years of experience in leadership positions focused on cybersecurity programs, enterprise initiatives, or related consulting engagements.
• Demonstrated success advancing the maturity of application security programs within complex organizations.
• Strong knowledge of secure software development lifecycle practices and their application across modern development environments.
• Proven ability to influence cross-functional stakeholders and lead organizational change in support of security objectives.
• Experience working with vulnerability management, security architecture, governance, risk and compliance, application development, and platform teams.
• Strong planning, reporting, and communication skills with the ability to translate security needs into actionable program plans.
• Familiarity with developer collaboration tools and governance practices, including environments that use GitHub or similar platforms.
• Ability to work effectively in a remote setting while coordinating with teams and partners across multiple functions and priorities.