Application Security Governance Officer

Responsibilities:

• Setting the requirements and high-level goals for application security area
• Tailoring and maintaining the application security management framework including legacy and modern SDLC/DevSecOps areas
• Supporting implementation of the SDLC and DevSecOps 
• Supervising vulnerability management process for the application area
• Cooperating with IT delivery units to improve application security posture
• Responsible to define process measurements and develop measurement system for application vulnerabilities
• Contributing to reporting function and its execution within application security creation, implementation and risk mitigation processes
• Cooperating with core departments and external suppliers to strengthen application security area

Requirements:

• Proven leadership for activities implementing and maintaining application security governance and management system and related controls in the medium/high sized organizations and projects
• Good understanding of the IT security challenges in the current and future state of large enterprises to prepare the organization with the right processes, skills, relationships, and capabilities against growing IT security risks
• Ability to establish and maintain good relations with your internal and external stakeholders will be essential to succeed in this role
• Knowledge of application security framework implementation, SDLC/DevSecOps implementation, SAST/DAST/SCA scan engines implementation, vulnerability management, risk assessment, exemption handling, stakeholders management
• Knowledge of modern application security area concepts like cloud security, container security, api security, IaaS code security, modern IAM concepts like zero trust model or OAuth2/OIDC, etc.
• Experience in implementation of the cloud related controls in application security area
• Proven knowledge of one or more well-known cyber-security frameworks (like ISF, NIST, SCF, ISO 27x, OWASP, etc.)
• 10+ years experience in IT Operations, Security & Development

Offer:

• Private medical care
• Trainings & Learning opportunities
• Ability to work 100% remotely