Program Manager

• Support the Information Security Office in transitioning the State’s SSDLC from a modernization project to a sustained operating program
• Coordinate the people, decisions, workflows, and measures needed to operationalize application security practices across State technology teams
• Drive adoption, performance, risk reduction, continuous improvement, follow-through, and accountability across stakeholders
• Work with Vulnerability Management, Security Architecture, GRC, Application Development, GitHub Governance, infrastructure and platform teams, agency product owners, and vendors
• Coordinate transition from project deliverables to owned processes with named owners, documented handoffs, decision paths, service expectations, and an operating cadence
• Maintain the program roadmap, priorities, dependencies, risks, and improvement backlog
• Validate and improve application risk, security requirements, design review, scanning, finding triage, remediation, exception, and release workflows
• Plan rollout waves and support security champions, training, office hours, and developer-facing guidance
• Gather feedback and remove workflow adoption barriers
• Help teams create risk-ranked remediation plans with owners, target dates, and closure evidence
• Track coverage gaps, aging findings, blockers, escalations, and remediation verification
• Facilitate working groups and leadership reviews; maintain the responsibility model and route decisions to authorized owners
• Define measures and coordinate reporting on application coverage, adoption, remediation, exceptions, and control performance
• Coordinate related initiatives in repository governance, security tooling, platform integration, third-party application security, and developer enablement
• Surface capacity, funding, and service dependencies; prepare options and recommendations for leadership

Explore Application Security Program Manager at Knowledge Services. Review requirements and application details.