Salary: 220000
Application Security Manager - Lead application security strategy, secure-by-design practices and DevSecOps improvements
- Own application security standards, architecture reviews and vulnerability remediation
- Influence security across a complex enterprise technology environment
About the role We're looking for an experienced
Application Security Manager to take ownership of application security across a large, complex enterprise environment.
This is an opportunity to influence how applications are designed, developed, tested and secured, working closely with Cyber Security, Architecture, Technology and Risk teams.
You'll lead the development of application security standards, oversee security assessments and testing, and help embed
secure-by-design and DevSecOps practices across technology delivery.
The role combines
technical application security expertise, stakeholder engagement and leadership, with the opportunity to improve security maturity across the organisation.
What you'll do - Lead application security standards, secure design patterns and security control requirements.
- Drive the adoption of secure-by-design and DevSecOps practices across applications and delivery pipelines.
- Oversee application security assessments, threat modelling, architecture reviews and security testing.
- Identify application vulnerabilities, assess associated risks and coordinate remediation activities.
- Work closely with Software Engineering, Architecture and Technology teams to embed security throughout the development lifecycle.
- Provide technical leadership and guidance to security professionals and delivery partners.
- Collaborate with Cyber Defence and Vulnerability Management teams on application security risks and incidents.
- Report on application security risks, control gaps, remediation progress and security maturity.
What you'll bring - Strong experience in Application Security, Product Security, DevSecOps or Security Architecture within complex enterprise environments.
- Solid understanding of secure software development, SDLC security controls and application security testing.
- Experience conducting application security assessments, threat modelling and secure design reviews.
- Knowledge of OWASP, NIST, ISO 27001 and security best practices.
- Experience identifying application vulnerabilities and driving remediation with technical delivery teams.
- Ability to embed security requirements into software development processes and CI/CD pipelines.
- Strong stakeholder management skills, with the ability to translate technical security risks into practical business recommendations.
- Experience providing technical leadership, mentoring security professionals or coordinating external delivery partners.
Relevant certifications such as CISSP, CISM or application security qualifications would be advantageous.
Why join? This is an opportunity to take ownership of an important security capability within a large enterprise environment.
You'll have the chance to: - Shape application security standards and strategy, rather than simply maintain existing controls.
- Influence how security is integrated into application development and technology delivery.
- Work alongside experienced Cyber Security, Engineering and Architecture professionals.
- Drive meaningful improvements in application security maturity and risk management.
- Combine technical expertise with leadership and broader strategic influence.
If you're an experienced application security professional who enjoys improving security practices, influencing technical teams and driving practical outcomes, we'd love to hear from you.
For a confidential discussion, contact
Hayley at
hayley@thedrivegroup.com.au.
For the latest jobs, tech news or to introduce a friend for a
$1,000 referral fee, follow us on LinkedIn:
https://www.linkedin.com/company/thedrivegroup
TheDriveGroup is 100% committed to improving meaningful diversity in the technology industry.
We partner with clients who embrace diversity and seek candidates across all backgrounds, abilities, genders, sexualities, cultures and faiths.