IAM Service Owner: Lead Secure SDLC & App Security

HCL Technologies Limited; United States; In loco; USD 140.000 - 190.000; Tempo pieno

Descrizione del lavoro

HCL Technologies Limited is seeking a Service Owner for Identity & Access Management (IAM) to lead enterprise application security strategy, governance, and SDLC practices. You will collaborate with solution architects, developers, cybersecurity teams, and stakeholders to embed security across the application lifecycle.

The role focuses on establishing standards, testing practices, and a security-by-design mindset, while ensuring compliance with healthcare privacy and regulatory requirements

Competenze

• 10+ years of experience in application security, cybersecurity, software engineering, or security architecture.
• Experience owning enterprise application security capabilities across multiple business domains.
• Experience supporting application portfolios within complex organizations (R&D, Commercial, Corporate).
• Strong understanding of secure SDLC practices, security architecture reviews, application security testing methodologies.
• Experience partnering with development teams, architects, and business stakeholders.
• Experience working in regulated environments; healthcare HIPAA knowledge is preferred.

Mansioni

• Define enterprise application security strategy, roadmap, and governance.
• Own secure SDLC practices across R&D, Commercial, and Corporate environments.
• Establish security governance for development, enhancement, and support activities.
• Own the security architecture review process and governance for design decisions.
• Partner with architects, owners, developers, and stakeholders to identify risks and controls.
• Define and govern application security testing practices, including security assessments, vulnerability testing, reviews, and pen tests.
• Establish standards, documentation, and reusable security patterns.
• Support application teams through design, development, implementation, and operations.
• Evaluate tools and drive improvements to security effectiveness and developer experience.
• Drive adoption of secure engineering and security-by-design principles.
• Define service KPIs, maturity objectives, and continuous improvement initiatives.
• Align capabilities with regulatory requirements including HIPAA where applicable.

Conoscenze

Secure SDLC

Security architecture

App security testing

Vulnerability mgmt

DevSecOps

Risk management

HIPAA knowledge

Stakeholder collaboration

Descrizione del lavoro

HCL Technologies Limited is seeking a Service Owner for Identity & Access Management (IAM) to lead enterprise application security strategy, governance, and SDLC practices. You will collaborate with solution architects, developers, cybersecurity teams, and stakeholders to embed security across the application lifecycle.

The role focuses on establishing standards, testing practices, and a security-by-design mindset, while ensuring compliance with healthcare privacy and regulatory requirements