Application Security Manager

Job Overview An organization is seeking an experienced Application Security Manager to lead security governance, compliance, vulnerability management, and application security initiatives across complex enterprise environments. This role is critical to ensuring that infrastructure, applications, and data assets are protected through industry-standard security controls, regulatory compliance, and continuous risk management practices. The ideal candidate will bring extensive experience in information security leadership, regulatory frameworks, security operations, and cross‑functional collaboration. Candidates who demonstrate strong expertise in security architecture, compliance management, and vulnerability remediation will be prioritized for interview consideration. Must Haves 10+ years of information technology experience with at least 5 years in a security leadership or management role. Strong knowledge of security frameworks and regulations including HIPAA, HITRUST, GDPR, NIST, FIPS, FedRAMP, and related standards. Experience implementing and managing application security programs, including SAST and DAST tools. Proven expertise in vulnerability management, penetration testing coordination, and remediation tracking. Experience designing and implementing security controls across enterprise applications, networks, cloud environments, and infrastructure. Strong understanding of audit processes, compliance reporting, and risk mitigation strategies. Exceptional verbal and written communication skills with the ability to present technical risks to business stakeholders and executive leadership. Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related discipline, or equivalent professional experience. What the Client Needs You to Do This role will serve as a key security leader responsible for protecting enterprise applications and technology platforms while ensuring compliance with organizational and regulatory requirements. The successful candidate will work closely with technical teams, auditors, compliance stakeholders, and business leaders to establish secure operational practices, reduce risk exposure, and improve overall security maturity. Key areas of impact include: Strengthening application and infrastructure security programs. Driving security compliance and audit readiness initiatives. Leading vulnerability management and remediation efforts. Promoting security awareness and best practices across teams. Supporting continuous improvement of security operations and governance processes. Key Responsibilities Develop, implement, and maintain enterprise application security policies, standards, and operational procedures. Establish and oversee data security management frameworks and security operations processes. Implement and manage security compliance programs aligned with recognized industry standards and regulatory requirements. Collaborate with privacy, security, and governance teams to obtain approvals, review compliance findings, and address identified risks. Coordinate internal and external audits, provide required documentation, and manage remediation activities. Lead vulnerability management programs, including vulnerability assessments, tracking, reporting, and remediation validation. Define penetration testing requirements and coordinate testing activities with internal teams and third‑party vendors. Evaluate, deploy, and support application security testing tools, including static and dynamic analysis solutions. Assess infrastructure, application, and cloud environments to ensure adherence to security best practices and organizational standards. Provide security architecture guidance and configuration recommendations for hosted and deployed systems. Partner with development, quality assurance, infrastructure, and operations teams to improve security and compliance outcomes. Support automation initiatives related to system administration, deployment processes, and software migration activities. Analyze security incidents, identify root causes, and coordinate timely resolution across multiple teams. Research, evaluate, and recommend security technologies, audit tools, and operational improvements. Deliver security training, awareness programs, and technical guidance to stakeholders throughout the organization. Participate in on‑call support rotations and respond to critical security or production incidents as required. Drive ongoing process improvements that enhance security effectiveness, efficiency, and compliance readiness. Additional Information Work arrangement may include onsite, hybrid, or remote components depending on organizational requirements. Position requires collaboration with cross‑functional technical and business teams. Flexibility to support occasional evening, weekend, or holiday work may be required. Participation in an on‑call rotation for critical production and security‑related incidents is expected. Experience with cloud security and compliance programs, particularly within AWS environments, is highly desirable. Professional certifications such as CISSP, CISM, CISA, CCSP, or equivalent security credentials are strongly preferred. Candidates should demonstrate strong analytical skills, attention to detail, problem‑solving abilities, and a commitment to continuous learning and security excellence. W2 employees of Overture Partners who work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), 401(k) starting on day one, a variety of voluntary benefits including life and disability insurance, and sick time if required by law in the worked‑in state/locality. #J-18808-Ljbffr