Business SME (Senior)
Core
Senior Business SME leading the transition of secure software development lifecycle (SSDLC) practices into a sustained operating program for state technology teams.
Role type
Senior Business SME (Application Security Program Manager)
Builds
Sustained operating program for application security practices across state technology teams
Domain
Public Sector / Application Security
Required skills
Program management, stakeholder communication, process establishment, organizational change management, risk assessment, roadmap planning, reporting, facilitation, security tooling integration, developer enablement
Preferred skills
Experience with SSDLC, vulnerability management, secure software development lifecycle governance
Technologies
GitHub, security scanning tools, vulnerability management platforms
Responsibilities
Coordinate transition from project deliverables to established operating processes; maintain roadmap, priorities, and improvement backlog; validate and improve application risk profiles and workflows; plan rollout phases with development partners; support security champions and training; track coverage gaps and aging findings; facilitate working groups and leadership reviews; define measures and coordinate reporting on adoption and remediation; identify capacity and funding dependencies; prepare recommendations for leadership.
Seniority
Senior, hands-on IC
