Remote Application Security Program Manager

Chandra Technologies, Inc; Washington (District of Columbia); Remote; USD 120,000 - 170,000; Full time

Job summary

Chandra Technologies, Inc. is seeking an Application Security Program Manager (Business SME 1) to guide the State of Maine's SSDLC transition and sustain ongoing security operations.

This role coordinates cross-functional teams, tracks adoption, and drives risk reduction across security, development, and governance functions. You will partner with Vulnerability Management, GRC, Security Architecture, and developers to implement repeatable processes, measure performance, and report progress to

Qualifications

• Experience leading cross-functional security programs across multiple teams.
• Strong understanding of Secure Software Development Lifecycle practices.
• Ability to translate policy issues into concrete actions and reporting.

Responsibilities

• Coordinate transition from project deliverables to owned processes with clear ownership.
• Validate and improve application risk profiles, security requirements, and release workflows.
• Plan rollout waves with development and platform partners; support security champions and guidance.
• Turn findings into risk-ranked plans with owners, dates, and closure evidence.
• Facilitate working groups and leadership reviews; route design questions to Architecture and risk decisions.
• Define measures and reporting on coverage, remediation, and control performance.
• Surface capacity, dependencies, and recommendations for leadership.

Skills

Leadership

Program Management

SSDLC

Stakeholder Management

Cybersecurity

Change Management

Facilitation

Job description

Chandra Technologies, Inc. is seeking an Application Security Program Manager (Business SME 1) to guide the State of Maine's SSDLC transition and sustain ongoing security operations.

This role coordinates cross-functional teams, tracks adoption, and drives risk reduction across security, development, and governance functions. You will partner with Vulnerability Management, GRC, Security Architecture, and developers to implement repeatable processes, measure performance, and report progress to