Senior Director, Enterprise AppSec & AI Security

S&P Global; Boulder (CO); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

The S&P Global SGA Application Security team seeks a senior leader to drive enterprise-wide security transformation, AI-powered security innovations, and global team leadership. You’ll partner with engineering, product, and business leaders to reduce risk while enabling growth and resilience.

This role focuses on secure SDLC, cloud-native security, and software supply chain controls, with ambitious governance, KPI reporting, and a commitment to continuous learning in a fast-paced,

Qualifications

• Demonstrated leadership of enterprise Application Security, DevSecOps, or Product Security programs in complex environments with proven track record of driving transformation
• Deep knowledge of application testing methodologies, threat modeling, secure architecture, CI/CD security, cloud-native security, and software supply chain risk management
• Experience defining enterprise standards, operating models, remediation governance, exception processes, and establishing measurable KPIs and KRIs
• Strong stakeholder management and executive communication skills with ability to translate technical risk into business impact and strategic decisions
• Experience leading teams, mentoring technical professionals, managing vendor relationships, and driving cross-functional initiatives across global organizations
• Executive-level communication and presentation capabilities
• Strategic thinking with ability to balance technical depth and business priorities
• Strong leadership and team development skills with global mindset
• Proven ability to influence and drive change across complex organizational structures

Responsibilities

• Lead execution of the enterprise Application Security strategy and roadmap, driving secure SDLC transformation, platform maturity, and measurable risk reduction across global engineering teams
• Own and oversee comprehensive application security testing capabilities including SAST, SCA, DAST, API security, threat modeling, and penetration testing while establishing enterprise standards and governance frameworks
• Drive strategic adoption and operational effectiveness of enterprise AppSec and ASPM platforms, providing executive-ready reporting on coverage, vulnerability trends, and remediation performance
• Lead software supply chain security initiatives covering dependency governance, artifact curation, provenance validation, and trusted build practices while managing incident response for zero-day exposures
• Build, mentor, and develop a high-performing global team while managing strategic vendor relationships and driving cross-functional transformation with technology, product, and business leaders
• Provide leadership in adopting generative AI and agentic technologies within Application Security, establishing governance for custom AI-enabled tools, agents, and automations while ensuring appropriate security and oversight

Skills

Enterprise security leadership

DevSecOps

Executive communication

Strategic planning

Cross-functional collaboration

Security governance

Security transformation

Tools

SAST tooling

SCA tooling

DAST tooling

Threat modeling tools

Job description

The S&P Global SGA Application Security team seeks a senior leader to drive enterprise-wide security transformation, AI-powered security innovations, and global team leadership. You’ll partner with engineering, product, and business leaders to reduce risk while enabling growth and resilience.

This role focuses on secure SDLC, cloud-native security, and software supply chain controls, with ambitious governance, KPI reporting, and a commitment to continuous learning in a fast-paced,