Application Security Director
Core
Define and evolve enterprise application security vision, strategy, and governance for secure SDLC, DevSecOps, API, cloud-native, and AI security across the financial services sector.
Role type
Strategy-level principal application security director
Builds
Enterprise application security operating models, governance frameworks, and multi-year roadmaps
Domain
Financial services + application security
Deliverable
dashboards & analysis
Required skills
Enterprise security strategy, secure SDLC, DevSecOps, API security, cloud-native security, AI security, software supply chain risk, executive reporting, regulatory compliance, team leadership, risk governance
Preferred skills
OWASP, NIST SSDF/CSF, secure-by-design, security architecture, Kubernetes, Infrastructure-as-Code, thought leadership, advanced certifications (CISSP, CSSLP, CISM)
Technologies
Generative AI, Kubernetes, Infrastructure-as-Code, cloud-native architectures, APIs
Responsibilities
Define enterprise application security vision and strategy; Lead multiple teams responsible for application security testing and secure development; Translate complex technical risk into executive-ready business narratives; Establish enterprise measurement strategy and regulatory evidence approaches; Represent the function in executive forums and industry groups like FS-ISAC
Seniority
Executive, strategy & mentorship