Operation Risk Manager

Job Summary

Looking for an experienced Application Security & Risk Governance professional to lead security governance initiatives across applications and infrastructure. The role requires strong technical expertise in security testing, vulnerability management, risk management, audit support, and team leadership to drive day-to-day security operations.

Key Responsibilities

• Oversee Application Security Testing activities, including SAST, DAST, SCA, and IAST.
• Lead Application and Infrastructure Vulnerability Management, prioritization, tracking, remediation governance, and SLA compliance.
• Drive Security Governance by monitoring security metrics, compliance, and adherence to organizational security standards.
• Manage Risk Assessment and Risk Management activities, including identification, mitigation planning, and risk acceptance processes.
• Coordinate and represent the security function during internal and external audits, ensuring timely evidence submission and closure of audit observations.
• Lead and mentor the security team, assign work, monitor progress, and ensure timely delivery of operational and strategic objectives.
• Manage day-to-day security operations, stakeholder communications, and cross-functional coordination with application, infrastructure, and other teams
• Prepare executive dashboards, governance reports, and presentations for leadership reviews.
• Drive continuous improvement initiatives to strengthen the organization's security posture and compliance framework.

Skill Requirements

• Hands-on experience in Application Security Testing (SAST, DAST, SCA, IAST).
• Strong knowledge of Application and Infrastructure Vulnerability Management.
• Hands-on experience for standards / framework like ISO 9001, 27001, Privacy, etc.
• Experience in Security Governance, Risk Management, and Compliance (GRC).
• Hands-on experience supporting Internal and External Security Audits.
• Excellent stakeholder management, communication, and reporting skills.
• Ability to manage multiple priorities in a fast-paced environment.

Other Requirements