Application Security Program Manager -II; On-Site

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full-time ICP Support HONOLULU, HI, US

2 days ago Requisition

Salary Range: $86,503.00 To $ Annually

Position Function:

The Application Security Program Manager is responsible for leading, governing, and continuously maturing the bank’s application security, identity management, fraud-related technology risk, and emerging technology risk programs within the Information Security Program. This role establishes the strategic direction, operating model, standards, risk assessment methodology, reporting, and multi-year roadmap needed to identity, assess, govern, and reduce risk across application environments.

This position has enterprise scope spanning internally developed applications, third-party hosted solutions, identity platforms, access administration processes, and critical business technologies that support customer-facing and internal operations. This role serves as a senior risk and control leader who partners across Technology, Digital Banking, Fraud, Enterprise Risk, Compliance, Internal Audit, Vendor Management, and other business leadership to align security requirements with business objectives and regulatory expectations.

They will serve as the bank’s senior Subject Matter Expert (SME) in areas related to application security controls, integrations, identity controls, fraud-enabling technology threats, and the security implications of emerging technologies. The role is accountable to lead risk assessments, defining treatment plans, overseeing control effectiveness, and reporting risk posture/key metrics, and advising on enterprise decisions.

The ideal candidate will have broad experience in technology, information security, risk management, securing applications, APIs, identity management, etc. They will work closely with the business and project teams to advocate security requirements to ensure applications and related security practices align with policies, standards, and best practices, while ensuring the security architecture and practices do not infringe on the needs of the business.

The position requires taking initiative to research, resource, and be self-reliant when approaching projects and tasks, in addition to being an effective communicator.

They will be responsible for:

• Developing and maintaining information security risk management processes that are clear and understandable, workable, up-to-date, and reflect regulatory and CPB-specific requirements and issues.
• Assisting in communicating such processes throughout the business, including holding training sessions where appropriate.
• Assisting with the planning, coordination, implementation, and management of security measures that manage risks to systems. and data, to prevent unauthorized modification, destruction, or disclosure of information, including outsider service providers.
• Analyzing and appraising new products and/or systems for security weaknesses and provide measures to prevent exposure and loss.

Performs all duties and interacts with internal and external customers in a manner aligned with the Company's Core Values of Voyaging Spirit and Positively Ohana;
Customer Experience Competencies of Customer Interaction, Empowerment and Ownership; and Basic Skills of Listening, Oral Communication, Written Communication, Action Orientated, Thoroughness, Problem Solving.

Primary Accountabilities:

• Responsible for training staff on policies and standards related to application security and identity management best practices, and training staff on methodologies in conducting risk assessments related to this area.
• Reviews/delegates work related to the governance and oversight of controls related to application security and identity management.
• Leads and motivates a team to ensure high levels of engagement, performance, and productivity.
• Sets clear goals and expectations for team members and provides guidance on how to achieve them.
• Conducts regular performance reviews to assess individual progress and provide constructive feedback.
• Identifies skills gaps and provides opportunities for professional growth through training, mentorship, or cross-functional collaboration.
• Leads a risk-based application security review program to ensure appropriate security controls are designed, implemented, and operate effectively.
• Validating application and other reference…