Bilingual Senior Application Security Lead

Canada Mortgage and Housing Corporation (CMHC) Société canadienne d'hypothèques et de logement(SCHL); Ottawa; Hybrid; CAD 104,000 - 130,000; Full time

Benefits offered by this job

Annual paid vacation

Performance incentive

Defined pension plan

Group insurance plan

Growth & training

Job summary

Canada Mortgage and Housing Corporation (CMHC) is seeking a Bilingual Senior Security Applications Specialist to design, govern, and improve the enterprise AppSec program. You will ensure applications and services align with risk tolerance, security strategy, and regulatory obligations.

You will advise senior management and embedding security controls across SSDLC/SDLC, Agile, DevSecOps, and CI/CD, balancing security with delivery velocity and business needs.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• Minimum 7 years in application security or secure software delivery.
• Experience implementing enterprise app security standards and governance.
• Proven ability embedding security in SDLC/SSDLC, Agile, DevOps and DevSecOps.
• Strong collaboration to bake secure‑by‑design and secure‑by‑default principles.
• Experience with security assurance activities: SAST, DAST, threat modeling, remediation.
• Excellent bilingual communication (English and French).

Responsibilities

• Lead and evolve the enterprise Application Security framework across the SDLC/SSDLC.
• Establish governance for Secure SDLC and infrastructure security practices.
• Promote secure-by-design culture with standards and guidance for dev teams.
• Partner with engineering to embed security into Agile, CI/CD, cloud environments.
• Provide guidance on secure design decisions, risk, and remediation prioritization.
• Define security assurance activities and quality gates in delivery processes.
• Act as senior advisor and escalation point for complex vulnerabilities.

Skills

Bilingual English/French

Application security

Secure SDLC

CI/CD pipelines

Cloud-native

Threat modeling

SAST/DAST/DAST tools

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Job description

Canada Mortgage and Housing Corporation (CMHC) is seeking a Bilingual Senior Security Applications Specialist to design, govern, and improve the enterprise AppSec program. You will ensure applications and services align with risk tolerance, security strategy, and regulatory obligations.

You will advise senior management and embedding security controls across SSDLC/SDLC, Agile, DevSecOps, and CI/CD, balancing security with delivery velocity and business needs.