Manager/Senior Manager, Delivery Management - Application Security

EPAM; City Of London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

EPAM is seeking a Manager/Senior Manager, Delivery Management - Application Security to guide enterprise AppSec programs across hybrid environments in the UK, Germany or the Netherlands. The role focuses on aligning technical delivery with business impact, governance, and measurable risk reduction.

You will translate security findings into executive-ready reporting, steer AI-enabled remediation at scale, and ensure strong governance across a diverse application portfolio.

Qualifications

• Proven track record delivering enterprise-scale cybersecurity programs.
• Security certification required; CSSLP/CISM/CISSP or equivalent preferred.
• Experience with AI optimization, agentic workflows, LLM integration or automated pipelines.

Responsibilities

• Steer roadmap, milestones, governance, risks, impediments, and financial performance of enterprise AppSec programs.
• Lead integration of AI optimization into security processes addressing high-risk findings at machine speed.
• Establish systems to validate, deduplicate and rank findings based on exploitability and business impact; drive remediation at scale.
• Develop evaluation criteria and actionable reporting; provide integrated security posture overview for portfolios.
• Translate AppSec metrics and risk reductions into clear reporting for executives and portfolio leaders.

Skills

Delivery management

Program leadership

AppSec expertise

Executive stakeholder management

Education

CSSLP / CISM / CISSP

Job description

Enterprise clients face mounting pressure to secure complex application portfolios against evolving threats and regulatory demands. This is the Manager/Senior Manager, Delivery Management - Application Security role at EPAM in Germany, the Netherlands or the UK, working hybrid. You connect technical execution, business impact and human-led governance, steering the delivery of our AI-Native Cyber Resilience Program. The role anchors on integrating agentic workflows and AI optimization into established security processes, driving high-velocity remediation. You translate raw security findings into actionable reporting for executives, ensuring every engagement delivers measurable risk reduction. The work matters because resilient application security is critical to business continuity and trust in today's digital landscape.

Responsibilities

• Steer the roadmap, milestones, governance model, risks and impediments, and financial performance of enterprise Application Security programs
• Lead the integration of agentic techniques and AI optimization into existing security processes to address high-risk findings at machine speed
• Establish and govern systems and processes that validate, deduplicate and rank security findings based on practical exploitability, business context and actual impact, driving the remediation of vulnerabilities at scale
• Establish clear evaluation criteria and actionable reporting, building an integrated overview of the security posture across an application portfolio
• Translate AppSec metrics, AI KPIs and risk reduction milestones into clear, actionable reporting for C-level executives and portfolio leaders

Requirements

• Proven track record in managing enterprise-scale delivery management or program leadership within cybersecurity, with a heavy emphasis on Application Security programs
• Industry-recognized security certification required, with a strong preference for CSSLP (Certified Secure Software Lifecycle Professional), CISM, CISSP or equivalent senior credentials
• Demonstrated experience or strong familiarity with AI optimization, agentic workflows, LLM integration or automated software/security pipelines
• Deep understanding of software development lifecycles, AppSec vulnerabilities, risk evaluation and quantification, executive stakeholder management
• Exceptional capability in governing cross-functional engineering teams, managing program financials and defining robust operational governance models