Senior Application Security & Risk Program Lead

CPB Group Pty; Honolulu, Northern (HI, KY); Hybrid; USD 87,000 - 138,000; Full time

Job summary

CPB Group Pty is seeking an experienced Application Security Program Manager I-II for an on-site role in Honolulu. You will lead the bank’s application security program, identity governance, and fraud-related tech risk, shaping strategy, standards, and a multi-year roadmap.

You will collaborate across Technology, Digital Banking, Fraud, and Compliance to integrate security with business needs. The role requires 7+ years in information security with leadership experience and strong communication

Qualifications

• Bachelor’s degree in information security or related field.
• 7+ years of information security and application security experience.
• 3+ years in management or team leadership with enterprise-wide responsibilities.
• Experience with risk assessments, control analysis, and regulatory considerations.

Responsibilities

• Lead enterprise application security, identity governance, and related risk programs.
• Develop and maintain a multi-year security roadmap and operating model.
• Oversee risk assessments, control reviews, remediation planning, and reporting of risk posture.
• Partner with Technology, Digital Banking, Fraud, and Compliance to align security with business goals.
• Train staff on policies, standards, and risk assessment methodologies.
• Liaise with vendors for security assessments and governance.

Skills

Information security

Application security

Risk management

Leadership

Communication

Vendor management

Threat modeling

Education

Bachelor’s Degree in Information Security

Bachelor’s Degree in MIS/CS

Job description

CPB Group Pty is seeking an experienced Application Security Program Manager I-II for an on-site role in Honolulu. You will lead the bank’s application security program, identity governance, and fraud-related tech risk, shaping strategy, standards, and a multi-year roadmap.

You will collaborate across Technology, Digital Banking, Fraud, and Compliance to integrate security with business needs. The role requires 7+ years in information security with leadership experience and strong communication