Application Security Director

Description Summary: The Application Security Director provides leadership to managers and professional staff responsible for enterprise application security, secure development, software assurance, software supply chain security, cloud-native security, API security, and emerging technology risk. This role is accountable for the performance and results of multiple related teams, develops departmental plans and priorities, and serves as an industry expert and strategic advisor for enterprise application security risk management. Duties and

Enterprise Application Security Strategy Define and evolve the enterprise Application Security vision, strategy, operating model, governance framework, control objectives, and multi-year roadmap aligned to business, technology, and cybersecurity objectives. Provide leadership across managers, professional staff, and related teams responsible for application security testing, secure SDLC, software assurance, DevSecOps, API security, AI security, and software supply chain risk. Shape cybersecurity and technology strategy by influencing investment decisions, resource allocation, security architecture standards, platform direction, risk acceptance, and remediation priorities.

Develop departmental plans, annual priorities, program objectives, staffing strategies, service models, and governance outcomes that improve application security maturity and enterprise resilience. Lead strategy for the organization’s most critical applica