Description

Secure applications and manage organizational risk by integrating security controls into the development lifecycle and cross-functional workflows.

Responsibilities

• Partner with Product, Engineering, Legal, HR, and IT to implement security controls and build a security-focused culture.
• Build and maintain controls to manage application, insider, and cyber risks in collaboration with Information Security and IT teams.
• Integrate secure SDLC concepts into software development, including threat modeling, code/design reviews, and security testing.
• Implement processes and tools for code analysis, vulnerability assessment, and open-source license compliance.
• Monitor the threat landscape to update strategy and intellectual protection roadmaps.

Required Skills

• 7-10 years of information security experience.
• 3-4 years of management experience in information security or a related field.
• Strong analytical and critical thinking skills for solving complex business problems.
• Ability to manage multiple projects across different business units and countries.
• Bachelor's degree in information technology or a related field.
• Knowledge of SDLC.
• CISSP, CISA, or CISM certifications.

Preferred Skills

• Experience in application security, product security, cyber security, or managing insider risk.
• Experience with threat modeling, security design reviews, and security architectural concepts.

Key Skills

Education

Any Gradute