Enterprise AppSec Leader - AI & Cloud Security

S&P Global; Princeton (NJ); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Investment in Your Future

Family Perks

Beyond the Basics

Job summary

S&P Global's SGA Application Security team is seeking a senior leader to drive enterprise AppSec, DevSecOps, and AI security strategies across global engineering teams. You will own testing capabilities, platform governance, and secure supply chain initiatives while guiding a high-performing, vendor-savvy organization.

You will translate security risk into business impact, define KPIs/KRIs, and champion AI-enabled tooling with governance.

Qualifications

• Demonstrated leadership of enterprise Application Security, DevSecOps, or Product Security programs in complex environments with proven track record of driving transformation.
• Deep knowledge of application testing methodologies, threat modeling, secure architecture, CI/CD security, cloud-native security, and software supply chain risk management.
• Experience defining enterprise standards, operating models, remediation governance, exception processes, and establishing measurable KPIs and KRIs.
• Strong stakeholder management and executive communication skills with ability to translate technical risk into business impact and strategic decisions.
• Experience leading teams, mentoring technical professionals, managing vendor relationships, and driving cross-functional initiatives across global organizations.
• Executive-level communication and presentation capabilities.
• Strategic thinking with ability to balance technical depth and business priorities.
• Strong leadership and team development skills with global mindset.

Responsibilities

• Lead execution of the enterprise Application Security strategy and roadmap, driving secure SDLC transformation, platform maturity, and measurable risk reduction across global engineering teams.
• Own and oversee comprehensive application security testing capabilities including SAST, SCA, DAST, API security, threat modeling, and penetration testing while establishing enterprise standards and governance frameworks.
• Drive strategic adoption and operational effectiveness of enterprise AppSec and ASPM platforms, providing executive-ready reporting on coverage, vulnerability trends, and remediation performance.
• Lead software supply chain security initiatives covering dependency governance, artifact curation, provenance validation, and trusted build practices while managing incident response for zero-day exposures.
• Build, mentor, and develop a high-performing global team while managing strategic vendor relationships and driving cross-functional transformation with technology, product, and business leaders.
• Provide leadership in adopting generative AI and agentic technologies within Application Security, establishing governance for custom AI-enabled tools, agents, and automations while ensuring appropriate security and oversight.

Skills

Security leadership

DevSecOps

Executive communication

Stakeholder management

Strategic thinking

AI security understanding

Vendor management

Team development

Job description

S&P Global's SGA Application Security team is seeking a senior leader to drive enterprise AppSec, DevSecOps, and AI security strategies across global engineering teams. You will own testing capabilities, platform governance, and secure supply chain initiatives while guiding a high-performing, vendor-savvy organization.

You will translate security risk into business impact, define KPIs/KRIs, and champion AI-enabled tooling with governance.