Associate Director, Application Security

S&P Global•Princeton, NJ

4d•$130,000 - $160,000

About The Position

The Associate Director, Application Security will lead enterprise application security strategy and transformation at S&P Global. The role partners with global engineering, technology, product, and business teams to reduce security risk while enabling innovation. It includes oversight of application security testing, platforms, software supply chain security, and governance, as well as leadership of a global team and strategic vendors. The position also guides adoption of generative AI and agentic technologies in Application Security, with appropriate security governance and oversight.

Requirements

Demonstrated leadership of enterprise Application Security, DevSecOps, or Product Security programs in complex environments, with a proven track record of driving transformation.
Deep knowledge of application testing methodologies, threat modeling, secure architecture, CI/CD security, cloud-native security, and software supply chain risk management.
Experience defining enterprise standards, operating models, remediation governance, exception processes, and measurable KPIs and KRIs.
Strong stakeholder management and executive communication skills, including the ability to translate technical risk into business impact and strategic decisions.
Experience leading teams, mentoring technical professionals, managing vendor relationships, and driving cross-functional initiatives across global organizations.
Executive-level communication and presentation capabilities.
Strategic thinking and ability to balance technical depth with business priorities.
Strong leadership and team development skills, with a global mindset.
Proven ability to influence and drive change across complex organizational structures.

Nice To Haves

Knowledge of generative AI, large language models, AI-assisted software development, and practical application of AI technologies to cybersecurity and DevSecOps use cases.
Understanding of Model Context Protocol (MCP), AI agents, agentic architectures, tool calling, retrieval-augmented generation, AI security risks, and governance frameworks for AI integration.
Experience with multi-cloud security architectures and controls across platforms such as AWS, Azure, and GCP, and understanding of cloud-native delivery environments.
Track record in vendor management, contract negotiation, platform roadmap development, and strategic technology partnerships in enterprise security environments.

Responsibilities

Lead execution of the enterprise Application Security strategy and roadmap, advancing secure SDLC transformation, platform maturity, and measurable risk reduction across global engineering teams.
Own and oversee application security testing capabilities, including SAST, SCA, DAST, API security, threat modeling, and penetration testing, and establish enterprise standards and governance frameworks.
Drive strategic adoption and operational effectiveness of enterprise AppSec and ASPM platforms, and provide executive-ready reporting on coverage, vulnerability trends, and remediation performance.
Lead software supply chain security initiatives covering dependency governance, artifact curation, provenance validation, and trusted build practices, and manage incident response for zero-day exposures.
Build, mentor, and develop a high-performing global team; manage strategic vendor relationships; and drive cross-functional transformation with technology, product, and business leaders.
Guide adoption of generative AI and agentic technologies within Application Security, establishing governance for custom AI-enabled tools, agents, and automations while ensuring security and oversight.