Application Security Program Manager

Experience: 8–10 Years
Job Type: Contract
Note: Candidates must be based in the Eastern Time Zone (ET) in the United States.

Job Summary

The Application Security Program Manager will oversee application security initiatives and transition modernization projects into sustainable operational programs. The role focuses on improving application security processes, coordinating cross-functional teams, driving program adoption, managing risks, and ensuring continuous improvement.

The ideal candidate will have strong experience in cybersecurity program management, application security, stakeholder management, and organizational change management.

Key Responsibilities

• Manage the transition of application security initiatives from project implementation to ongoing operations.
• Maintain program roadmaps, priorities, dependencies, risks, and improvement plans.
• Coordinate with application development, security architecture, vulnerability management, GRC, infrastructure, platform teams, and vendors.
• Improve application security processes, including security assessments, code scanning, vulnerability management, remediation, risk management, and release workflows.
• Support the implementation and adoption of Secure Software Development Lifecycle (SSDLC) practices across development teams.
• Develop rollout plans, coordinate training sessions, and provide guidance to development teams.
• Track security findings, prioritize remediation activities, monitor progress, and escalate risks and blockers.
• Facilitate stakeholder meetings, leadership reviews, and cross-functional working groups.
• Define and monitor program performance metrics, including application coverage, security findings, remediation progress, and control effectiveness.
• Identify process improvement opportunities and provide recommendations to leadership.
• Coordinate application security initiatives involving repository governance, security tools, platform integration, third-party applications, and developer enablement.

Required Qualifications

• 8–10 years of experience in leadership roles, cybersecurity program management, and organizational change management.
• Demonstrated experience improving application security program maturity.
• Experience managing cross-functional initiatives involving multiple stakeholders and technical teams.
• Strong understanding of application security processes and software development practices.
• Experience managing program roadmaps, risks, dependencies, and continuous improvement initiatives.
• Excellent stakeholder management, communication, documentation, and facilitation skills.

Preferred Qualifications

• Experience implementing, operationalizing, or governing Secure Software Development Lifecycle (SSDLC) practices across multiple development teams.
• Knowledge of application security requirements, code and dependency scanning, vulnerability management, remediation, and risk treatment.
• Experience coordinating organizational change and driving adoption of security processes.
• Ability to translate technical and policy requirements into actionable plans, measurable outcomes, and management reports.
• Experience working with security architecture, Governance Risk and Compliance (GRC), application development teams, and security tools.

Top Skills

• Cybersecurity Program Management
• Application Security Program Management
• Secure Software Development Lifecycle (SSDLC)
• Stakeholder Management
• Organizational Change Management Leadership
• Vulnerability Management
• Risk Management and Remediation Tracking
• Cross-Functional Program Coordination