svp - application security governance manager (rohq - global identity access Management (giam) / ciso) (rohqCitigroup

The APAC Application Security Governance Manager is a cross-functional role that will be responsible for the operations of various Application Security program initiatives in the APAC region. The position reports directly to the Application Security Program Manager. The successful candidate must be an individual who understands modern software development trends, understands engineering-led software security practices, and keeps up with the ever-evolving cyber security threat landscape. The successful candidate will liaise with internal groups and our regional partners to ensure that program deliverables are met.
Success in the role requires an innovative mind, a proven track record of delivering solutions that meet security needs, assist in the automation of security as code and enable successful reporting of detection and responses to all threats in our environment. The individual will work closely with SSDLC program to contribute to reporting and creation of key indicators of application security testing standards and policy adherence. Responsibilities include ensuring the operations of testing services and methodologies (be they tool-based and/or manual) in the early SSDLC lifecycle. The primary focus will address testing initiative needs within development organizations striving for continuous deployment and using automated security tooling including SAST, DAST and SCA. Within his/her leadership role, this individual is expected to mentor team members, set direction, and lead execution of services as a hand-on participant.
Key Responsibilities:
The candidate will be responsible for the aspects of the Application Security Program initiatives including but not limited to the following:
Manage multiple security program initiatives that support the security testing requirements at the bank
Maintain strong working relationships with Program Leads/teams, product delivery teams, project management, third party management, enterprise architecture, audit teams, etc.
Participate in security and technology strategic planning to ensure identified risk governance is incorporated into the CISO enterprise strategy and initiatives
In partnership with business sectors, participate in delegate action groups to provide identification of areas to strengthen development processes and security testing
Appropriately assess risk and provide software security advice when business decisions are made
Interface with Application Security Program Team to oversee Program projects and initiatives and make strategic recommendations to senior manager on standards and policy changes based on trends
Qualifications:
10+ years of relevant experience
Proven experience with scripting and programming languages preferred
Advanced Microsoft Office skills preferred
Demonstrated ability to collaborate with a variety of analytical groups and service delivery organizations
Advanced analytical and problem solving skills
Consistently demonstrates clear and concise written and verbal communication
Proficient in interpreting and applying policies, standards and procedures
Demonstrated ability to remain unbiased in a diverse working environment
Education:
Bachelor's degree/University degree or equivalent experience
Master's degree preferred
Job Family Group: Technology
Job Family: Information Security
Time Type: Full time
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Citigroup Inc. and its subsidiaries ("Citi") invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review .
View the " " poster. View the .
View the .
View the
Citigroup

Taguig City, Metro Manila
Permanent
Full-time