Business SME (Senior)

Requirements:

• Substantial experience managing complex technology, cybersecurity, or application security programs across multiple teams, with a record of delivering through influence and shared accountability.
• Working knowledge of software delivery and application security, including security requirements, code and dependency scanning, vulnerability management, remediation, and risk treatment.
• Ability to turn technical and policy issues into clear actions, ownership, decisions, and management reports; strong facilitation, writing, and stakeholder communication skills.
• Experience establishing repeatable processes, coordinating organizational change, using metrics to improve performance, and balancing competing priorities in an evolving program.
• Experience implementing, operationalizing, or governing Secure Software Development Lifecycle (SSDLC) practices across multiple development teams.
• Bachelors degree.

Responsibilities:

• Coordinate the transition from project deliverables to established operating processes, including clear ownership, documented handoffs, decision paths, service expectations, and a practical operating cadence. Maintain the roadmap, priorities, dependencies, risks, and improvement backlog.
• Work with accountable teams to validate and improve application risk profiles and workflows for security requirements, design reviews, scanning, finding triage, remediation, exceptions, and releases. Ensure guidance reflects actual tools and varied application and vendor models.
• Plan rollout phases with development and platform partners; support security champions, training, office hours, and clear guidance for developers. Collect feedback and address barriers to consistent adoption.
• Help product and development teams convert findings into risk-ranked plans with owners, target dates, and evidence of closure. Track coverage gaps, aging findings, blockers, and escalations while responsible teams carry out remediation and verification.
• Facilitate working groups and leadership reviews, maintain an accurate responsibility model, and route design questions to Security Architecture and policy, exception, and risk decisions through GRC and authorized Information Security Office leadership.
• Define useful measures with data owners and coordinate reliable reporting on application coverage, adoption, remediation, exceptions, and control performance. Use trends and team feedback to recommend improvements, report progress, and adjust priorities.
• Coordinate related work in repository governance, security tooling, platform integration, third-party application security, and developer enablement. Identify capacity, funding, and service dependencies, and prepare concise options and recommendations for leadership.

Technologies:

• Support
• Security
• GitHub

More

We are recruiting for an Application Security Program Manager (Business SME 1) to support the Information Security Office as the State transitions its secure software development lifecycle modernization project into a sustained operating program. The role focuses on making application security practices workable across State technology teams and advancing adoption, performance, risk reduction, and continuous improvement. This is a telecommute contract position paying $54.80–$64.80 per hour; final pay depends on factors such as education, experience, location, duties, and certifications. We offer eligible candidates medical, prescription, dental, vision, accidental death and dismemberment, life insurance, short-term disability, and 401(k) benefits. At Randstad Digital, we welcome people of all abilities and provide reasonable accommodations during the application and interview process. We are an equal opportunity employer.

last updated 43 week of 2026