Manager, Information Security - Application Security

Overview

The Information Security Manager
- Application Security will manage and maintain the organization's cybersecurity systems and infrastructure and protect the organization's IT systems and computer networks against cyberattacks, intrusions, malware, and various types of data breaches. They oversee secure development practices, vulnerability assessments (scanning/penetration testing), and ensure compliance. This is an on-site position located in Springfield, MO.

• Security Strategy:
  Develop and implement security policies and procedures for the full software development life cycle (SDLC).
• Vulnerability Management:
  Oversee vulnerability assessments, code scanning, and penetration testing, prioritizing findings for remediation.
• Team Leadership:
  Supervise, train, and manage security personnel or App Sec engineers.
• Threat Modeling & Risk Analysis:
  Perform, manage, and deliver risk assessments for applications.
• Guidance &
  
  Collaboration:
  
  Act as a liaison between development teams and security, providing guidance on best practices for secure coding.
• Incident Response:
  Investigate security incidents and provide timely resolutions.
• Reporting & Metrics:
  Produce key performance indicators (KPIs) and reports on the security posture.
• Lead in detecting and analyzing security incidents, including attacks, breaches, and identified vulnerabilities, and remediate any security gaps in line with the security incident management procedure.
• Explore and develop a detailed understanding of external developments or emerging issues and evaluate their potential impact on, or usefulness to, the organization.
• Document complex "as is" and "to be" processes and describe the changes required to migrate to the "to be" capability to record accurately the change required.
• Provide input and assist GRC with the drafting of policies, procedures, and related guidelines within an area of expertise to meet defined key principles and ensure compliance with external requirements.
• Monitor and review performance and behaviors within area of responsibility to identify and resolve noncompliance with the organization's policies and relevant regulatory codes and codes of conduct.
• Elicit complex business requirements using a variety of methods, such as interviews, document analysis, workshops, and workflow analysis, to express the requirements in terms of target user roles and goals.
• Communicate the actions needed to implement the function's strategy and business plan within the team; explain the relationship to the broader organization's mission, vision, and values; motivate Team Members to commit to these and to do extraordinary things to achieve local business goals.
• Support strategy formulation for digital by exploring how information technology can be used to help the organization become more responsive to customer needs and changing business requirements.
• Manage and report on the performance of a substantial, diverse team; set appropriate performance objectives for direct reports or project/account team members and hold individuals accountable for achieving them; take appropriate corrective action where necessary to ensure the achievement of team/personal objectives.
• Develop and/or deliver budget plans with guidance from senior colleagues.
• Use the organization’s formal development framework to identify the team's individual development needs. Plan and implement actions, including continuing professional development specified by professional or regulatory institutions, to build their professional capabilities. Provide informal training or coaching to others throughout the organization in own area of expertise to enable others to improve performance and fulfill personal potential.
• Develop stakeholder engagement by identifying stakeholders; by finding out their needs, issues, and concerns; and by reacting to these needs, issues, and concerns to support the communication of business information and decisions.
• Conduct research and select relevant information to enable analysis of key themes and trends using primary data sources and business intelligence tools.
• Manage a portfolio of projects while reporting to senior colleagues.
• Deve…