Program Manager - Application Security - Hybrid

Job Description

As a Sr. Program Manager Application Security, you will lead complex, cross-functional cybersecurity initiatives focused on Application Security (App Sec), Software Supply Chain Security, and Dev Sec Ops . This role will drive execution across Product, Architecture, Engineering, Security, and Operations teams while delivering scalable governance, risk reduction, and compliance outcomes.

• Lead multiple enterprise Open-Source Software (OSS) and software supply chain security initiatives.
• Drive end-to-end execution across dependency governance, SCA governance, production enforcement, and CI/CD security controls.
• Coordinate across Product, Engineering, Architecture, App Sec, and Infrastructure teams to ensure delivery alignment.
• Manage program governance including roadmap tracking, RAID management, executive reporting, and dependency coordination.
• Partner with engineering teams to operationalize policy-driven security controls and scalable enforcement mechanisms.
• Translate technical initiatives into business-focused outcomes tied to risk reduction and audit readiness.
• Drive Organizational Change Management (OCM) strategy to support adoption of OSS controls, including stakeholder engagement, communication planning, and rollout enablement across engineering teams.
• Lead change readiness, training, and adoption efforts to ensure successful implementation of new governance, enforcement, and developer workflow changes.

• Present concise program updates to senior leadership and governance forums.
• Elevate risks, blockers, compliance concerns, and execution gaps proactively.
• Drive decision-making and cross-functional alignment across distributed teams.
• Develop clear, executive-level narratives around software supply chain risk and governance maturity.
• Establish and execute communication strategies to drive alignment, awareness, and sustained adoption of OSS security initiatives across leadership and engineering stakeholders.

• Experience leading App Sec, Dev Sec Ops , OSS governance, or software supply chain programs at enterprise scale.
• Strong understanding of OSS ecosystems, SCA governance, dependency management, and software supply chain risk.
• Familiarity with tools such as Black Duck, Artifactory, Nexus, Pro Get, SBOM platforms, or similar technologies.
• Experience with CI/CD-integrated security controls, policy enforcement, and audit/compliance programs.
• Strong stakeholder management and ability to influence without direct authority.
• Financial services or other regulated industry experience preferred.
• Experience driving Organizational Change Management (OCM), including large-scale technology adoption, behavioral change, and cross-functional transformation initiatives, is highly preferred.

The hourly range for roles of this nature are $60.00 to $90.00/hr rates are heavily dependent on skills, experience, location, and industry.

cyber

Think is an Equal Opportunity Employer.