The Opportunity:The Senior Security Technical Program Manager will be responsible for driving the planning, execution, and delivery of security initiatives and programs across the organization. This role will involve collaborating with cross-functional teams to ensure the security of our applications.Establish strong relationships with different stakeholders in order to communicate and drive the security roadmap.The ideal candidate will have a strong technical background in security, experience in security by design and Secure-SDLC, excellent project management skills, and the ability to effectively communicate and coordinate with stakeholders at all levels.Serve as a subject matter expert on application security matters, providing guidance and support to technical and non-technical stakeholders.Lead the development and implementation of application security programs and initiatives to protect the organization's software assets and mitigate security risks.Work closely with product and engineering departments to guarantee and confirm program scope, priorities, and Definition of Done, thereby ensuring the attainment of defined business outcomesCollaborate with software development, SRE, Program Managers and QA teams to integrate security best practices throughout the software development lifecycle (SDLC).Coordinate the resolution of vulnerabilities identified by the application security team, coordinating with engineering teams to ensure timely remediation.Define and report on development lifecycle security compliance, success metrics and active progress.Oversee security assessments, audits, and compliance activities to identify vulnerabilities and ensure adherence to security standards, regulations, and industry best practices.Coordinate the threat and vulnerability management, secret management, and the third-party security program to improve our security posture and mitigate risks effectively.Drive continuous improvement of security processes and procedures, leveraging automation and technology where applicable.Represent the user's interests in security designs, actively gather feedback, pinpoint security hurdles, and incorporate them into our strategic planning.Manage relationships with external security vendors, consultants, and other stakeholders to augment internal capabilities and stay abreast of industry trends and emerging threats.Lead efforts to ensure compliance with relevant laws, regulations, and industry standards governing application security, such as GDPR, HIPAA, PCI DSS, and others.Mentor and coach junior members of the application security team, fostering a culture of learning and professional development.
