IT - Program Manager/Technology - Senior

Appsec Oss Sr. Program Manager

Seeking a seasoned Sr. Program Manager to lead complex, cross-functional cybersecurity initiatives focused on application security (appsec), software supply chain security, and devsecops. This role will drive execution across product, architecture, engineering, security, and operations teams while delivering scalable governance, risk reduction, and compliance outcomes.

Core Responsibilities

• Lead multiple enterprise open-source software (oss) and software supply chain security initiatives.
• Drive end-to-end execution across dependency governance, sca governance, production enforcement, and ci/cd security controls.
• Coordinate across product, engineering, architecture, appsec, and infrastructure teams to ensure delivery alignment.
• Manage program governance including roadmap tracking, raid management, executive reporting, and dependency coordination.
• Partner with engineering teams to operationalize policy-driven security controls and scalable enforcement mechanisms.
• Translate technical initiatives into business-focused outcomes tied to risk reduction and audit readiness.
• Drive organizational change management (ocm) strategy to support adoption of oss controls, including stakeholder engagement, communication planning, and rollout enablement across engineering teams.
• Lead change readiness, training, and adoption efforts to ensure successful implementation of new governance, enforcement, and developer workflow changes.

Executive Communication & Governance

• Present concise program updates to senior leadership and governance forums.
• Elevate risks, blockers, compliance concerns, and execution gaps proactively.
• Drive decision-making and cross-functional alignment across distributed teams.
• Develop clear, executive-level narratives around software supply chain risk and governance maturity.
• Establish and execute communication strategies to drive alignment, awareness, and sustained adoption of oss security initiatives across leadership and engineering stakeholders.

Preferred Experience

• Experience leading appsec, devsecops, oss governance, or software supply chain programs at enterprise scale.
• Strong understanding of oss ecosystems, sca governance, dependency management, and software supply chain risk.
• Familiarity with tools such as black duck, artifactory, nexus, proget, sbom platforms, or similar technologies.
• Experience with ci/cd-integrated security controls, policy enforcement, and audit/compliance programs.
• Strong stakeholder management and ability to influence without direct authority.
• Financial services or other regulated industry experience preferred.
• Experience driving organizational change management (ocm), including large-scale technology adoption, behavioral change, and cross-functional transformation initiatives, is highly preferred.

"Mindlance is an equal opportunity employer and does not discriminate in employment on the basis of minority/gender/disability/religion/lgbti/age/veterans."