Lead Application Security Program Manager

Cybersecurity Jobs; Honolulu (HI); On-site; USD 87,000 - 138,000; Full time

Job summary

The Application Security Program Manager provides leadership and governance for the bank’s application security, identity management, fraud-related technology risk, and emerging technology risk programs within the Information Security Program.

This role establishes standards, risk assessment methodology, reporting, and a multi-year roadmap, coordinating with Technology and business leaders to align security expectations with regulatory requirements and business objectives.

Qualifications

• Bachelor’s degree from a four-year university in information security, MIS, or computer science.
• 7+ years of information security experience focusing on application security and regulatory privacy laws.
• 3+ years leading enterprise-wide cross-functional teams and programs.

Responsibilities

• Develop and maintain information security risk management processes aligned with regulatory requirements.
• Plan, coordinate, implement, and manage security measures addressing risks to systems and data.
• Lead a risk-based application security review program with appropriate controls.
• Train staff on application security, identity management, and risk assessment methodologies.
• Oversee vendor security assessments and manage remediation with accountable stakeholders.
• Provide leadership reporting and risk insights to information security leadership and stakeholders.

Skills

Information security

Application security

Regulatory compliance

Leadership

Risk management

Education

Bachelor’s degree in Information Security

Job description

The Application Security Program Manager provides leadership and governance for the bank’s application security, identity management, fraud-related technology risk, and emerging technology risk programs within the Information Security Program.

This role establishes standards, risk assessment methodology, reporting, and a multi-year roadmap, coordinating with Technology and business leaders to align security expectations with regulatory requirements and business objectives.