Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Associate Director, Application Security role.
Rezi rewrites your resume against S&P Global's job description. Free.
Tailor your resume to this Associate Director, Application Security role.
Rezi rewrites your resume against S&P Global's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Associate Director, Application Security posting at S&P Global — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Associate Director, Application Security posting at S&P Global — free, in seconds.
About the Role
The SGA Application Security team acts as a strategic security partner, integrating Application Security, DevSecOps, Exposure Management, and AI Security to proactively reduce risk and enable enterprise innovation. This role involves driving enterprise-wide security transformation, guiding AI-powered security innovations, and leading a global team to solve complex challenges impacting business growth and cyber resilience.
Responsibilities
- Lead execution of the enterprise Application Security strategy and roadmap, driving secure SDLC transformation, platform maturity, and measurable risk reduction across global engineering teams.
- Own and oversee comprehensive application security testing capabilities including SAST, SCA, DAST, API security, threat modeling, and penetration testing while establishing enterprise standards and governance frameworks.
- Drive strategic adoption and operational effectiveness of enterprise AppSec and ASPM platforms, providing executive-ready reporting on coverage, vulnerability trends, and remediation performance.
- Lead software supply chain security initiatives covering dependency governance, artifact curation, provenance validation, and trusted build practices while managing incident response for zero-day exposures.
- Build, mentor, and develop a high-performing global team while managing strategic vendor relationships and driving cross-functional transformation with technology, product, and business leaders.
- Provide leadership in adopting generative AI and agentic technologies within Application Security, establishing governance for custom AI-enabled tools, agents, and automations while ensuring appropriate security and oversight.
Requirements
- Demonstrated leadership of enterprise Application Security, DevSecOps, or Product Security programs in complex environments with proven track record of driving transformation.
- Deep knowledge of application testing methodologies, threat modeling, secure architecture, CI/CD security, cloud-native security, and software supply chain risk management.
- Experience defining enterprise standards, operating models, remediation governance, exception processes, and establishing measurable KPIs and KRIs.
- Strong stakeholder management and executive communication skills with ability to translate technical risk into business impact and strategic decisions.
- Experience leading teams, mentoring technical professionals, managing vendor relationships, and driving cross-functional initiatives across global organizations.
- Executive-level communication and presentation capabilities.
- Strategic thinking with ability to balance technical depth and business priorities.
- Strong leadership and team development skills with global mindset.
- Proven ability to influence and drive change across complex organizational structures.
- Demonstrated knowledge of generative AI, large language models, AI-assisted software development, and practical application of AI technologies to cybersecurity and DevSecOps use cases.
- Strong understanding of Model Context Protocol (MCP), AI agents, agentic architectures, tool calling, retrieval-augmented generation, AI security risks, and governance frameworks for AI integration.
- Experience with multi-cloud security architectures and controls across platforms such as AWS, Azure, and GCP with understanding of cloud-native delivery environments.
- Proven track record in vendor management, contract negotiation, platform roadmap development, and strategic technology partnerships in enterprise security environments.
Skills
- Application Security
- DevSecOps
- Exposure Management
- AI Security
- SAST
- SCA
- DAST
- API security
- Threat modeling
- Penetration testing
- ASPM platforms
- Software supply chain security
- Dependency governance
- Artifact curation
- Provenance validation
- Trusted build practices
- Generative AI
- Agentic technologies
- Secure SDLC
- CI/CD security
- Cloud-native security
- AWS
- Azure
- GCP
- Vendor management
- Contract negotiation
- Platform roadmap development
- Strategic technology partnerships
Experience Level
- Senior leader
- Middle Professional Tier II
Salary/Compensations
- $130,000 to $160,000
Benefits
- Health care coverage designed for the mind and body.
- Generous time off.
- Access to resources for career growth and learning.
- Competitive pay.
- Retirement planning.
- Continuing education program with a company-matched student loan contribution.
- Financial wellness programs.
- Benefits for families.
- Retail discounts.
- Referral incentive awards.
About the Company
- Advancing Essential Intelligence.
- We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.
- From finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it. We are changing the way people see things and empowering them to make an impact on the world we live in. We’re committed to a more equitable future and to helping our customers find new, sustainable ways of doing business. Join us and help create the critical insights that truly make a difference.
- Our Values: Integrity, Discovery, Partnership
- Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of integrity in all we do, bring a spirit of discovery to our work, and collaborate in close partnership with each other and our customers to achieve shared goals.
Equal Opportunity
- S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law.
- Only electronic job submissions will be considered for employment.
- If you need an accommodation during the application process due to a disability, please send an email to: EEO.Compliance@spglobal.com and your request will be forwarded to the appropriate person.