FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Associate Director, Application Security
S&P Global. Lead execution of the enterprise Application Security strategy and roadmap .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in leading enterprise Application Security strategies, including secure SDLC transformation, application security testing, and software supply chain security. Proven ability to manage global teams, drive cross-functional initiatives, and communicate technical risks to executive stakeholders.
Highest-signal resume keywords
Application Security LeadershipSecure SDLC TransformationThreat ModelingGenerative AI IntegrationMulti-Cloud Security Architectures
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Application Testing MethodologiesCI/CD SecurityCloud-Native SecuritySoftware Supply Chain Risk ManagementIncident Response ManagementVulnerability Trends AnalysisGovernance FrameworksKPI and KRI DefinitionPenetration TestingSAST, SCA, DAST
Soft Skills
Stakeholder ManagementExecutive CommunicationStrategic ThinkingTeam DevelopmentInfluencing Change
Tools & Technologies
AppSec PlatformsASPM PlatformsAI-Enabled ToolsGenerative AI TechnologiesCloud Platforms (AWS, Azure, GCP)
Industry Keywords
DevSecOpsProduct SecurityGovernance FrameworksVendor ManagementContract Negotiation
Tech Stack
Tools & technologiesAWSAzureCloudCyber SecurityGoogle Cloud PlatformSDLC
About the role
Key responsibilities & impact- Lead execution of the enterprise Application Security strategy and roadmap
- Drive secure SDLC transformation, platform maturity, and measurable risk reduction across global engineering teams
- Own and oversee application security testing capabilities including SAST, SCA, DAST, API security, threat modeling, and penetration testing
- Establish enterprise application security standards and governance frameworks
- Drive adoption and operational effectiveness of enterprise AppSec and ASPM platforms
- Provide executive-ready reporting on coverage, vulnerability trends, and remediation performance
- Lead software supply chain security initiatives covering dependency governance, artifact curation, provenance validation, and trusted build practices
- Manage incident response for zero-day exposures
- Build, mentor, and develop a high-performing global team
- Manage strategic vendor relationships and drive cross-functional transformation with technology, product, and business leaders
- Lead adoption of generative AI and agentic technologies within Application Security
- Establish governance for custom AI-enabled tools, agents, and automations
Requirements
What you’ll need- Demonstrated leadership of enterprise Application Security, DevSecOps, or Product Security programs in complex environments with proven track record of driving transformation
- Deep knowledge of application testing methodologies, threat modeling, secure architecture, CI/CD security, cloud-native security, and software supply chain risk management
- Experience defining enterprise standards, operating models, remediation governance, exception processes, and measurable KPIs and KRIs
- Strong stakeholder management and executive communication skills, with ability to translate technical risk into business impact and strategic decisions
- Experience leading teams, mentoring technical professionals, managing vendor relationships, and driving cross-functional initiatives across global organizations
- Executive-level communication and presentation capabilities
- Strategic thinking with ability to balance technical depth and business priorities
- Strong leadership and team development skills with global mindset
- Proven ability to influence and drive change across complex organizational structures
- Knowledge of generative AI, large language models, AI-assisted software development, and AI applications to cybersecurity and DevSecOps use cases
- Understanding of Model Context Protocol (MCP), AI agents, agentic architectures, tool calling, retrieval-augmented generation, AI security risks, and governance frameworks for AI integration
- Experience with multi-cloud security architectures and controls across AWS, Azure, and GCP
- Experience in vendor management, contract negotiation, platform roadmap development, and strategic technology partnerships in enterprise security environments
Benefits
Comp & perks- Health care coverage designed for the mind and body
- Generous time off
- Continuous learning resources and career development
- Competitive pay
- Retirement planning
- Continuing education program
- Company-matched student loan contribution
- Financial wellness programs
- Family benefits
- Retail discounts
- Referral incentive awards