Application Security Regulatory Compliance Manager

Job Title:
Application Security Regulatory Compliance Manager
Location:
Vancouver, BC (Hybrid)
Duration: + Months

You will be responsible for risk management, audit and regulatory compliance activities for the Application Security team. The successful candidate will partner closely with Application Security teams, Security Risk teams, and auditors to help ensure compliance with relevant regulations and industry standards. The candidate will also drive the development and maintenance or reporting to ensure transparency and accountability for overall compliance with business and governance activities, including the development and implementation of policies, procedures, and controls to maintain the highest level of Application Security risk management and compliance.

Daily Responsibilities:

Manage regulatory compliance deliverables:
Maintain expertise in the control environment and ensure timely execution of regulatory program timelines.

Stakeholder

Collaboration:

Partner with internal/external teams to gather evidence and prepare responses to regulatory inquiries.

Drive audit remediation:
Address audit findings, track corrective actions, and ensure compliance gaps are resolved.

Integrate security practices:
Partner with Application Security Leads to oversee compliant execution of Static Application Security Testing (SAST), Software Composition Analysis (SCA), Dynamic Application Security Testing (DAST), and penetration testing while supporting integration with enterprise technologies.

Identify and mitigate risks:
Proactively assess compliance risks, recommend mitigations, and prepare reports for management/regulatory bodies.

Must Have:

Excellent leadership and collaboration skills:
The ability to collaborate with various stakeholders, including application security teams, vulnerability management, and risk partners, is crucial for success in this role. The candidate must understand, speak, and write in both technical and simplified language, translating technical concepts between various audiences and partner teams including communications to auditor or regulator audiences.

Audit and regulatory compliance expertise:
Experience with managing audit, regulatory and key control testing engagements, is essential for this position.

Strong understanding of security risk management frameworks:
The ideal candidate should have in-depth knowledge of security best practices, risk management principles, and industry-recognized security frameworks.

Nice to Have:

Certifications in information security (, CISSP, CCSP, CRISC, CIAM, ITIL)

Previous work experience within the financial sector or other large enterprise industry

Understanding of application security concepts and testing methods such as penetration testing, SAST, SCA and DAST.

Familiarity with application security tools, such as Checkmarx, NexusIQ, Snyk, Burp Suite

Mindlance is an equal opportunity employer. We are committed to inclusive, equitable, barrier-free recruitment and selection processes, and work environment in accordance with the Accessibility for Ontarians with Disabilities Act (AODA). We will be happy to work with applicants requesting accommodation at any stage of the hiring process. “We use AI in our Hiring processes”