Functional Area: Engineering
Role Summary:
Own AppSec governance, KPIs, and executive reporting across engineering programs.
Centralize defect management, compliance metrics, and remediation timelines.
Drive continuous monitoring and Q4 2026 compliance goals.
Key Responsibilities:
Define measurable KPIs for automation, compliance, and operational efficiency.
Design centralized dashboards (Power BI/Grafana) and data pipelines for AppSec telemetry.
Publish weekly status reports and monthly executive summaries.
Coordinate audits and evidence collection; manage exceptions and risk mitigations.
Partner with teams to accelerate remediation and improve control coverage.
Required Qualifications & Skills:
Bachelor s degree or equivalent.
6+ years in AppSec/DevSecOps with focus on metrics and governance.
Data analysis and visualization skills; ability to translate data into decisions.
Experience with risk registers and escalation processes.
Preferred Qualifications:
Familiarity with compliance standards (e.g., SOC 2, ISO 27001).
Certifications: CISSP, CRISC.
Experience with data engineering for security telemetry.
Tools & Technologies:
BI tools (Power BI, Grafana)
Data stores (SQL, Elastic)
ServiceNow AVR
JIRA/Confluence