Business SME

Global Technical Talent, an Inc. 5000 Company; Augusta (ME); Hybride; USD 90 000 - 96 000; Temps partiel

Avantages offerts par ce poste

Medical Insurance

401k Retirement Plan

Résumé du poste

Global Technical Talent, an Inc. 5000 Company, seeks an Application Security Program Manager in Augusta, ME. The role coordinates SSDLC adoption across state tech teams, balancing program delivery with risk reduction and continuous improvement.

You will lead cross-functional teams, drive governance and reporting, and elevate security decisions to the appropriate owners, while ensuring accountability and measurable improvements across the portfolio.

Qualifications

• 8–10 years in leadership roles and cybersecurity program management.
• Experience improving application security program maturity.
• Stakeholder Management and Organizational Change Management leadership.
• SSDLC experience.

Responsabilités

• Coordinate transition from project deliverables to owned processes with defined owners and a program roadmap.
• Validate and improve the application risk profile, security requirements, design review, scanning, remediation workflows.
• Plan rollout waves with development partners; support security champions, training, and developer guidance.
• Turn findings into risk-ranked plans with owners, target dates, and closure evidence; track coverage gaps.
• Facilitate working groups and leadership reviews; route questions through Security Architecture and GRC.
• Define measures and reporting; use trends to propose changes and adjust priorities.
• Coordinate initiatives in repo governance, security tooling, and vendor security; surface dependencies.

Connaissances

Stakeholder Management

Organizational Change Management

SSDLC

Program Leadership

Security Governance

Cross-functional Leadership

Description du poste

Hybrid — 100% remote unless residing in Maine; Maine-based candidates report onsite one day bi-weekly (travel costs to State office locations will not be reimbursed). Only candidates in the Eastern and Central time zones will be considered.

• Position Type: Contract
• Pay Rate: $65.00–$70.00 / Hour (USD)
• Contract Duration: 1 year
• Work Authorization: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Business SME

Location: Augusta, ME

Onsite Flexibility

Hybrid — 100% remote unless residing in Maine; Maine-based candidates report onsite one day bi-weekly (travel costs to State office locations will not be reimbursed). Only candidates in the Eastern and Central time zones will be considered.

Contract Details

• Position Type: Contract
• Pay Rate: $65.00–$70.00 / Hour (USD)
• Contract Duration: 1 year
• Work Authorization: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Job Summary

The Application Security Program Manager (Business SME 1) supports the Information Security Office in transitioning the State's secure software development lifecycle (SSDLC) from a near-complete modernization project to a sustained operating program. The position coordinates the people, decisions, workflows, and measures needed to make application security practices workable across State technology teams. As initial transition tasks are completed, the manager shifts effort to adoption, performance, risk reduction, and continuous improvement across the broader application security portfolio.

This is a cross-functional program management role. The manager works with Vulnerability Management, Security Architecture, Governance Risk and Compliance (GRC), Application Development, GitHub Governance, infrastructure and platform teams, agency product owners, and vendors. The manager drives follow-through, program adoption, and accountability across stakeholders and elevates decisions to the appropriate owner; specialist teams retain their established technical, product, and risk approval authority.

Key Responsibilities

• Coordinate transition from project deliverables to owned processes, including named owners, documented handoffs, decision paths, service expectations, and a practical operating cadence. Maintain the program roadmap, priorities, dependencies, risks, and improvement backlog.
• Work with accountable teams to validate and improve the application risk profile, security requirements, design review, scanning, finding triage, remediation, exception, and release workflows. Ensure guidance reflects real tools and different applications and vendor models.
• Plan rollout waves with development and platform partners; support security champions, training, office hours, and clear developer-facing guidance. Gather feedback and remove barriers that prevent teams from applying the workflow consistently.
• Help product and development teams turn findings into risk-ranked plans with owners, target dates, and closure evidence. Track coverage gaps, aging findings, blockers, and escalations while the responsible teams perform remediation and verification.
• Facilitate working groups and leadership reviews, maintain an accurate responsibility model, and route design questions to Security Architecture and policy, exception, and risk decisions through GRC and authorized Information Security Office leadership.
• Define useful measures with data owners; coordinate trustworthy reporting on application coverage, adoption, remediation, exceptions, and control performance. Use trends and team feedback to propose changes, report progress, and adjust priorities.
• Coordinate related initiatives in repository governance, security tooling, platform integration, third-party application security, and developer enablement. Surface capacity, funding, and service dependencies; prepare concise options and recommendations for leadership.

Required Experience

• 8 to 10 years of experience in leadership roles, program management, and change agent roles, improving application security program maturity.

Must-Have Requirements

• 8 to 10 years of experience in leadership roles and cybersecurity program management.
• Experience improving application security program maturity.
• Stakeholder Management and Organizational Change Management Leadership.
• Secure Software Development Lifecycle (SSDLC).

Preferred Skills

• Substantial experience managing complex technology, cybersecurity, or application security programs across multiple teams, with demonstrated delivery through influence and shared accountability.
• Working knowledge of software delivery and application security concepts, including security requirements, code and dependency scanning, vulnerability management, remediation, and risk treatment.
• Ability to translate technical and policy issues into clear actions, owners, decisions, and management reporting; strong facilitation, writing, and stakeholder communication skills.
• Experience establishing repeatable processes, coordinating organizational change, using measures to improve performance, and managing competing priorities in an evolving program.
• Experience implementing, operationalizing, or governing Secure Software Development Lifecycle (SSDLC) practices across multiple development teams.

Important Notes

• The selected candidate will be required to pass the required background checks as a condition of employment.
• Only candidates in the Eastern and Central time zones will be considered.

About the Client

This Augusta, Maine-based government services employer operates across justice, education, and economic development functions, supporting critical State of Maine applications and systems at enterprise scale. The organization relies on professionals including application security program managers, information security specialists, IT program managers, and technology governance leads to maintain the confidentiality, integrity, and availability of essential government services for citizens across the state.

Benefits

• Medical, Vision, and Dental Insurance Plans
• 401k Retirement Fund

About GTT

GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. We highly value diverse and inclusive workplaces and support Fortune 500 organizations across banking, financial services, technology, life sciences, biotech, utilities, and retail sectors throughout the U.S. and Canada.

Job Number: 26-17415

#gttjobs