Application Security Program Manager

Application Security Program Manager | Location:Remote | Contract | Hourly Pay Range $50-$62

This Application Security Program Manager role supports an Information Security Office in operationalizing and sustaining a modernized Secure Software Development Lifecycle (SSDLC) program. You’ll drive cross-functional adoption, accountability, and continuous improvement across application security workflows, partnering with security, development, platform, and governance stakeholders while respecting established decision and approval authorities.

Key Responsibilities

• Coordinate the transition from project deliverables to owned, repeatable SSDLC operating processes with clear ownership, handoffs, decision paths, and an operating cadence.
• Maintain the application security program roadmap, priorities, dependencies, risks, and continuous-improvement backlog.
• Validate and improve workflows across security requirements, design review, scanning, triage, remediation, exceptions, and release processes in collaboration with accountable teams.
• Plan and execute rollout waves with development and platform partners, including security champions, training, office hours, and developer-facing guidance.
• Collect stakeholder feedback, identify adoption barriers, and drive issue resolution to improve consistent workflow usage.
• Enable teams to convert findings into risk-ranked remediation plans with owners, target dates, and closure evidence; track aging findings, coverage gaps, blockers, and escalations.
• Facilitate working groups and leadership reviews; route architecture questions appropriately and ensure risk/exception decisions are elevated to authorized owners.
• Define practical program measures with data owners and coordinate reliable reporting on coverage, adoption, remediation, exceptions, and control performance.
• Coordinate related initiatives across repository governance, security tooling, platform integration, third-party application security, and developer enablement; surface capacity/funding dependencies and provide recommendations.
  
  

Required Qualifications

• 8–10 years of experience in leadership roles and cybersecurity program management.
• Demonstrated success improving application security program maturity.
• Strong stakeholder management and organizational change management leadership.
• Secure Software Development Lifecycle (SSDLC) experience.
• Ability to lead cross-functional application security initiatives, drive adoption, and improve security posture in a fast-paced environment.
• Availability aligned to the work location expectations: 100% remote unless residing in Maine (if in Maine, must report onsite one day bi-weekly); candidates must be in Eastern or Central time zones.
  
  

Preferred Qualifications

• Experience managing complex technology or cybersecurity programs through influence and shared accountability.
• Working knowledge of software delivery and application security practices including security requirements, code/dependency scanning, vulnerability management, remediation, and risk treatment.
• Strong facilitation and written communication skills, with the ability to translate technical/policy issues into clear actions, ownership, decisions, and reporting.
• Experience establishing repeatable processes, measuring performance, and managing competing priorities.
• Experience implementing, operationalizing, or governing SSDLC practices across development teams.
  
  

About Delphi-US - Peacemakers In The Talent War

Delphi-US is a national IT Services firm based in Newport, Rhode Island. Delphi attracts our nation's best and brightest Technical & Professional Talent and positions our nation's finest employers to further their competitive advantages. Delphi's core technical focus includes Data Intelligence Engineering & Analytics, AI/ML Operational Excellence, DevOps & Cloud Computing, Health IT & Life Sciences, and Energy Management/Power Systems; serving domains from sensitive national energy sectors to critical financial services, biomed, life sciences & pharma, major government & municipal institutions, and much of the USA's Fortune 500 corporations. Delphi Associates are deployed on critical IT Projects where their consultative business acumen, comprehensive technical expertise, and committed service mission drives our client's success. Our proprietary skill-based and cultural matching process results in higher qualified project teams, custom curated for our client's specific technical & functional goals. We are supremely experienced, friendly, professional, and ready to advocate on your behalf. Delphi has an indelible understanding of employer expectations, a track record of project success and we deliver lasting results.

6414