Global Head of Application Security & DevSecOps

Moody's Investors Service; New York (NY); On-site; USD 228,000 - 333,000; Full time

Job summary

Moody's Investors Service is seeking a strategic leader to drive enterprise application security and posture management across a global organization. You will define the security strategy, build a world-class team, and ensure secure software delivery through secure-by-design practices and governance.

You will guide VMDR, CSPM, and SSPM programs, collaborating with engineering, product, risk, and compliance teams to elevate risk posture and regulatory readiness across Moody's global platforms.

Qualifications

• Progressive cybersecurity leadership with enterprise scope.
• Expertise in secure SDLC, threat modeling, and secure design reviews.
• Strong ability to translate risk into business decisions for executives.

Responsibilities

• Define, own, and evolve enterprise Application Security strategy and roadmap.
• Build and develop a global team of Application Security, Product Security, and DevSecOps professionals.
• Embed security across the SDLC with secure-by-design practices.
• Drive adoption of threat modeling, secure coding, testing, and SBOM/security controls.
• Oversee VMDR program including risk-based prioritization and metrics.
• Guide CSPM and SSPM capabilities with platform and engineering teams.
• Consolidate findings into a unified enterprise risk view for data-driven decisions.
• Partner with stakeholders to strengthen posture and regulatory readiness.

Skills

Application Security

Threat Modeling

Secure Coding

DevSecOps

Cloud Security

Security Leadership

Executive Communication

Vulnerability Management

Education

Bachelor's degree in Computer Science, Engineering, Information Security, or related field

Advanced degree or relevant certifications such as CISSP, CSSLP, CISM, GWAPT, or OSCP

Job description

Moody's Investors Service is seeking a strategic leader to drive enterprise application security and posture management across a global organization. You will define the security strategy, build a world-class team, and ensure secure software delivery through secure-by-design practices and governance.

You will guide VMDR, CSPM, and SSPM programs, collaborating with engineering, product, risk, and compliance teams to elevate risk posture and regulatory readiness across Moody's global platforms.