Application Security Governance Officer in Bucuresti

SDLC (master) Cybersecurity (master) Governance (master) DCG is a technology expert who gathers IT professionals in its teams. Due to our and our client’s development and the large number of ongoing projects, we are constantly looking for new employees and associates with high competencies in the IT area or other, consistent with the information provided in the advertisements. About the project: A project in the automotive industry closely related to Cybersecurity and Governance. We are looking for a person starting immediately, willing to work fully remotely. Responsibilities: Setting the requirements and high-level goals for application security areaTailoring and maintaining the application security management framework including legacy and modern SDLC/DevSecOps areas as well as supporting implementation of the SDLC and DevSecOpsBeing responsible for defining process measurements and developing measurement system for application vulnerabilitiesSupervising vulnerability management process for the application areaCooperating with IT delivery units to improve application security posture Requirements: 10+ years experience in IT Operations, Security & DevelopmentProven leadership for activities implementing and maintaining application security governance and management system and related controls in the medium/high sized organizations and projectsGood understanding of the IT security challenges in the current and future state of large enterprises to prepare the organization with the right processes, skills, relationships, and capabilities against growing IT security risksProven knowledge of one or more well-known cyber-security frameworks (like ISF, NIST, SCF, ISO 27x, OWASP, etc.)Knowledge of application security framework implementation, SDLC/DevSecOps implementation, SAST/DAST/SCA scan engines implementation, vulnerability management, risk assessment, exemption handling, stakeholders management What we offer: Private medical careTrainings & Learning opportunitiesAbility to work 100% remotelyStrong focus on work-life balanceComprehensive training package with mentor