Global VP, Application Security & DevSecOps

Moody's; New York (NY); On-site; USD 228,000 - 333,000; Full time

Job summary

Moody's is seeking a senior leader to shape enterprise application security strategy and posture management, enabling secure, resilient, and scalable software delivery aligned with business objectives.

You will build and develop a global organization of Application Security, Product Security, and DevSecOps professionals, promote secure-by-design practices, and advance VMDR, CSPM, and SSPM programs with cross-functional partners. Exceptional executive communication is essential.

Qualifications

• 15+ years of progressive cybersecurity experience with leadership in app/product security.
• Deep expertise in secure SDLC, threat modeling, secure architecture, and OWASP Top 10.
• Strong software engineering background to review production code.
• Experience in DevSecOps, security automation, and AI-enabled security capabilities.
• Knowledge of cloud-native architectures, Kubernetes, APIs, and SaaS.
• Proven track record leading global teams and enterprise security transformation.
• Excellent executive communication and stakeholder management to translate risks for senior leaders.
• Experience with VMDR, CSPM, SSPM programs is a plus.

Responsibilities

• Lead enterprise application security strategy and posture management capabilities to enable secure, resilient, and scalable software delivery.
• Define, own, and evolve the enterprise Application Security strategy, roadmap, and operating model.
• Build, lead, and develop a global organization of Application Security, Product Security, and DevSecOps professionals.
• Embed security throughout the software development lifecycle by establishing secure-by-design and secure-by-default practices across engineering teams.
• Drive adoption of threat modeling, secure coding standards, secure design reviews, automated security testing, and software supply chain security controls.
• Provide strategic oversight for the enterprise VMDR program, including risk-based prioritization, remediation governance, penetration testing, and security metrics reporting.
• Guide CSPM and SSPM capabilities in partnership with platform and engineering teams, supporting baselines and remediation.
• Consolidate findings into a unified view of enterprise risk for data-driven decisions.
• Partner with Engineering, Risk, Legal, Compliance, and executives to strengthen security posture.

Skills

15+ yrs cybersecurity

Secure SDLC

Software engineering

DevSecOps

AI-enabled security

Cloud & Kubernetes

Leadership

Stakeholder management

VMDR/CSPM/SSPM

Education

Bachelors in CS/Engineering/InfoSec

Advanced degree or certifications (CISSP/CSSLP/CISM/GWAPT/OSCP)

Tools

N/A

Job description

Moody's is seeking a senior leader to shape enterprise application security strategy and posture management, enabling secure, resilient, and scalable software delivery aligned with business objectives.

You will build and develop a global organization of Application Security, Product Security, and DevSecOps professionals, promote secure-by-design practices, and advance VMDR, CSPM, and SSPM programs with cross-functional partners. Exceptional executive communication is essential.