Application Security Manager

Product Manager – App Sec Delivery & Execution

Duration: 12 Months

The Product Manager is responsible for coordinating delivery, managing dependencies, and owning risk execution for the Application Security Migration, Automation, and Compliance Program. This role augments the client's Application Security (App Sec) organization to ensure tier-based migrations, automation adoption, and governance commitments are delivered according to plan.

• Coordinate end-to-end delivery of App Sec migrations aligned with Tier 1, Tier 2, and Tier 3 security requirements and quarterly targets.
• Develop and maintain migration plans, dependency trackers, risk registers, and governance dashboards.
• Vulnerability Operations
• ASC/CoP
• Threat Modeling
• ASX/Sec Design
• Penetration Testing Teams
• Project Planning Teams
• Track execution of CI/CD security automation initiatives, including:
• SAST (Static Application Security Testing)
• DAST (Dynamic Application Security Testing)
• SCA (Software Composition Analysis)
• Service Now AVR enablement for in-scope applications
• Maintain a weekly risk register, drive mitigation actions, and elevate high-impact risks.
• Provide weekly status reports and monthly executive summaries covering progress, risks, dependencies, and key milestones.
• Ensure delivery remains within the agreed Statement of Work (SOW) scope, excluding remediation, development, infrastructure security, and procurement activities.

• Strong experience in delivery coordination, dependency management, and risk management.
• Experience supporting large-scale security transformation, migration, or platform modernization programs.
• Ability to operate effectively within vendor-augmented and SOW-driven environments.
• Strong stakeholder management and cross-functional collaboration skills.
• Excellent communication, reporting, and executive presentation capabilities.
• Experience managing governance processes, program tracking, and risk escalation frameworks.
• Familiarity with Application Security (App Sec) programs and security automation initiatives is highly preferred.