Security Program Manager

July 22

Apply Now

Receive Emails with Similar Jobs

AutoTrader.ca

WebsiteLinkedInAll Job Openings

Choice digital partner for dealership operations.

Canadian Automotive Expertise • Leading Dealership Advertising Partner • Robust Audience of Used & New Car Shoppers • Unrivaled Audience Data & Industry Insights • Digital Retailing Services

501 - 1000

Description

• Manage the security project portfolio and ensure alignment with the security strategy and roadmap. • Coordinate and communicate with security teams and stakeholders on project scope, deliverables, status, and issues. • Track and report on security project progress, budget, resources, and risks. • Facilitate the security risk management process, including identification, analysis, mitigation, and reporting of security risks. • Conduct security audits and assessments to evaluate the effectiveness of security controls and compliance with security policies and standards. • Perform and oversee static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA) to identify and remediate security vulnerabilities in the software development lifecycle. • Manage the pentest results and ensure that the findings are properly validated, prioritized, and resolved. • Prepare and present security reports and dashboards to senior management and stakeholders. • Provide guidance and support to security teams and stakeholders on security best practices, processes, and tools. • Assist with the proof of concept and implementation of new security products and solutions.

Requirements

• Bachelor's degree in computer science, information security, or related field, or equivalent work experience. • At least 5 years of experience in security project management, security risk management, or security consulting. • Strong knowledge of security frameworks, standards, and best practices, such as NIST, ISO, PCI, etc. • Proficient in security project management tools and methodologies, such as Agile, Scrum, Kanban, etc. • Excellent communication, collaboration, and problem-solving skills. • Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) certification is a plus. • Project Management Professional (PMP), Certified Scrum Master (CSM), or Certified Project Management Practitioner (CPMP) certification is preferred. • Experience with SAST, DAST, and SCA tools and techniques is highly desirable. • Experience with pentest tools and methodologies is a plus. • Experience with evaluating and implementing new security products and solutions is a plus.