Remote Application Security Program Lead

Knowledge Services; United States; Remote; USD 100,000 - 180,000; Full time

Job summary

Knowledge Services is seeking an Application Security Program Manager for a remote contract role supporting the State of Maine Office of Technology. The incumbent will collaborate across Vulnerability Management, Security Architecture, GRC, Development, GitHub Governance, and vendors to mature the SSDLC and establish a sustainable security program.

The role emphasizes adoption, risk reduction, and continuous improvement across multiple teams in a fast-paced government IT environment, with remote

Qualifications

• 8 to 10 years of leadership and cybersecurity program management experience.
• Experience improving application security program maturity.
• Strong stakeholder management and organizational change leadership.
• Expertise with Secure Software Development Lifecycle (SSDLC).

Responsibilities

• Coordinate transition from project deliverables to owned processes with named owners.
• Maintain the program roadmap, priorities, dependencies, risks, and improvement backlog.
• Validate and improve application risk profile, security requirements, design review, scanning, finding triage, remediation, exception, and release workflows.
• Plan rollout waves with development and platform partners; support security champions, training, and developer-facing guidance.
• Facilitate working groups and leadership reviews; maintain a clear responsibility model and escalate decisions as needed.

Skills

Leadership

Cybersecurity program management

Change management

SSDLC

Stakeholder management

Cross-functional collaboration

Job description

Knowledge Services is seeking an Application Security Program Manager for a remote contract role supporting the State of Maine Office of Technology. The incumbent will collaborate across Vulnerability Management, Security Architecture, GRC, Development, GitHub Governance, and vendors to mature the SSDLC and establish a sustainable security program.

The role emphasizes adoption, risk reduction, and continuous improvement across multiple teams in a fast-paced government IT environment, with remote