Senior Director, Data & Application Security (Hybrid)

Penn Medicine, University of Pennsylvania Health System; Philadelphia (Philadelphia County); Hybrid; USD 200,000 - 280,000; Full time

Job summary

Penn Medicine is seeking a Senior Director, Cybersecurity Data & Application Security to provide strategic and operational leadership for enterprise data and application security programs. The role protects critical information assets, APIs, databases, and software development environments while aligning with governance, architecture standards, and engineering capabilities.

Reporting to the CISO, you will lead teams across SSDLC, threat modeling, and secure software development while

Qualifications

• Bachelor's degree is required.
• 12+ years IT experience is required.
• 7+ years of cybersecurity experience is required.
• Master's degree or 7+ years of management experience is preferred.
• 10+ years of cybersecurity experience is preferred.

Responsibilities

• Lead a highly experienced team of application security professionals, data security specialists, and cybersecurity experts responsible for enterprise data and application security capabilities.
• Develop and execute Penn Medicine's enterprise Data Security and Application Security strategy, operating model, governance framework, and multi-year roadmap.
• Lead security architecture reviews, threat modeling, and security design consultations supporting application development, cloud initiatives, data platforms, digital transformation projects, and emerging technology implementations.
• Oversee the implementation and operation of enterprise application security, data security, API security, database security, and software assurance capabilities.
• Establish enterprise policies, standards, architectures, and control frameworks governing data protection, secure software development, API security, software supply chain security, and application security practices.

Skills

Cybersecurity leadership

Threat modeling

SSDLC

DevSecOps

API security

Education

Bachelor's degree

Master's degree preferred

Tools

SAST

DAST

SCA

IAST

CI/CD security

Job description

Penn Medicine is seeking a Senior Director, Cybersecurity Data & Application Security to provide strategic and operational leadership for enterprise data and application security programs. The role protects critical information assets, APIs, databases, and software development environments while aligning with governance, architecture standards, and engineering capabilities.

Reporting to the CISO, you will lead teams across SSDLC, threat modeling, and secure software development while