Program Manager, Application Security

Our client, a globally recognized financial services organization, is seeking an experienced Program Manager to drive a key Application Security initiative across its regional technology and information risk environment. This is a high-impact role, initially offered on a 12-month contract with the potential to extend or convert to a permanent position.

The role will suit a strong technology Project / Program Manager with experience delivering cybersecurity, application security, information security, technology risk, or security remediation initiatives within a complex financial services or insurance environment.

As a Program Manager, Application Security, you will be responsible for the following:

1. Manage end-to-end delivery of application security related project workstreams across the full project lifecycle.
2. Drive project planning, governance, milestones, risks, issues, dependencies, and executive-level reporting.
3. Work closely with information security, technology risk, application development, infrastructure, business, vendor, and offshore teams.
4. Coordinate with regional stakeholders and subject matter experts to support application security uplift, remediation, control enhancement, and risk mitigation activities.
5. Ensure project delivery is aligned with internal security standards, control requirements, regulatory expectations, and technology governance frameworks.
6. Track project progress closely and escalate risks or issues with clear mitigation plans.
7. Support delivery across areas such as secure SDLC, DevSecOps, vulnerability management, penetration testing, cloud security, and application security remediation.
8. Provide clear communication across senior stakeholders and project teams within a complex matrix environment.

To be considered for this role as Program Manager, Application Security, you should possess the following qualifications and skills:

1. Bachelor’s degree in Technology, Information Security, Computer Science, Business, or related discipline.
2. 8 to 12 years of experience in technology project / program management, preferably within financial services or insurance.
3. Strong experience managing cybersecurity, information security, application security, technology risk, or security remediation projects.
4. Good understanding of application security, secure SDLC, DevSecOps, vulnerability management, penetration testing, cloud security, or related security domains.
5. Prior experience working with regional teams, offshore delivery teams, vendors, and multiple technology stakeholders.
6. Strong stakeholder management, governance, reporting, risk management, and delivery tracking capability.
7. Able to operate independently and drive outcomes within a complex matrix environment.
8. Strong analytical, problem-solving, communication, and presentation skills.
9. Excellent spoken and written English is required. Cantonese and / or Mandarin would be advantageous.
10. Immediately available candidates will be considered first.