Program Manager ( Application Security / Cybersecurity )

Job Summary

The Application Security Program Manager will oversee application security initiatives and transition modernization projects into sustainable operational programs.

The role focuses on improving application security processes, coordinating cross-functional teams, driving program adoption, managing risks, and ensuring continuous improvement.

Key Responsibilities

• Manage the transition of application security initiatives from project implementation to ongoing operations.
• Maintain program roadmaps, priorities, dependencies, risks, and improvement plans.
• Coordinate with application development, security architecture, vulnerability management, GRC, infrastructure, platform teams, and vendors.
• Improve application security processes, including security assessments, code scanning, vulnerability management, remediation, risk management, and release workflows.
• Support the implementation and adoption of Secure Software Development Lifecycle (SSDLC) practices across development teams.
• Develop rollout plans, coordinate training sessions, and provide guidance to development teams.
• Track security findings, prioritize remediation activities, monitor progress, and escalate risks and blockers.
• Facilitate stakeholder meetings, leadership reviews, and cross-functional working groups.
• Define and monitor program performance metrics, including application coverage, security findings, remediation progress, and control effectiveness.
• Identify process improvement opportunities and provide recommendations to leadership.
• Coordinate application security initiatives involving repository governance, security tools, platform integration, third-party applications, and developer enablement.

Required Qualifications

• 8–10 years of experience in leadership roles, cybersecurity program management, and organizational change management.
• Demonstrated experience improving application security program maturity.
• Experience managing cross-functional initiatives involving multiple stakeholders and technical teams.
• Strong understanding of application security processes and software development practices.
• Experience managing program roadmaps, risks, dependencies, and continuous improvement initiatives.
• Excellent stakeholder management, communication, documentation, and facilitation skills.

Preferred Qualifications

• Experience implementing, operationalizing, or governing Secure Software Development Lifecycle (SSDLC) practices across multiple development teams.
• Knowledge of application security requirements, code and dependency scanning, vulnerability management, remediation, and risk treatment.
• Experience coordinating organizational change and driving adoption of security processes.
• Ability to translate technical and policy requirements into actionable plans, measurable outcomes, and management reports.
• Experience working with security architecture, Governance Risk and Compliance (GRC), application development teams, and security tools.

Top Skills

• Cybersecurity Program Management
• Application Security Program Management
• Secure Software Development Lifecycle (SSDLC)
• Stakeholder Management
• Organizational Change Management Leadership
• Vulnerability Management
• Risk Management and Remediation Tracking
• Cross-Functional Program Coordination