Remote Application Security Program Lead (SSDLC)

Cybersecurity Jobs; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Knowledge Services is seeking an experienced Application Security Program Manager (contract) to help the State of Maine transition and sustain SSDLC practices remotely from the United States. You will lead cross-functional initiatives, align with GRC, architecture, and development teams, and drive adoption, risk reduction, and continuous improvement across the application security portfolio.

The role requires 8–10 years in leadership and cybersecurity program management, with strong stakeholder

Qualifications

• 8–10+ years in leadership roles and cybersecurity program management.
• Experience improving application security program maturity.
• Strong stakeholder management and organizational change leadership.
• Working knowledge of SSDLC.
• Certification in code and dependency scanning.
• Excellent facilitation and communication skills.
• Experience managing complex programs across multiple teams.

Responsibilities

• Support the Information Security Office in transitioning SSDLC to a sustained operating program.
• Coordinate people, decisions, workflows, and measures across technology teams.
• Shift from transition to adoption, performance, risk reduction, and continuous improvement.
• Lead a cross-functional program management effort across stakeholders.
• Partner with Vulnerability Management, Security Architecture, GRC, Dev, and platform teams.
• Ensure accountability and escalate decisions as needed while technical teams retain authority.
• Oversee application security efforts across multiple teams to improve security posture.
• Maintain a program roadmap with priorities, dependencies, risks, and backlog.
• Define measures with data owners and report on coverage, adoption, remediation, and control performance.

Skills

Leadership

Stakeholder management

SSDLC understanding

Risk management

Program management

Facilitation & communications

Education

Bachelor's degree in a related field

Security certification (code scanning)

Tools

GitHub Governance

GRC tooling

Job description

Knowledge Services is seeking an experienced Application Security Program Manager (contract) to help the State of Maine transition and sustain SSDLC practices remotely from the United States. You will lead cross-functional initiatives, align with GRC, architecture, and development teams, and drive adoption, risk reduction, and continuous improvement across the application security portfolio.

The role requires 8–10 years in leadership and cybersecurity program management, with strong stakeholder