{"id":1745197,"url":"https://alion.io/job/we-got-you-application-security-program-manager-i-ii-on-site","title":"Application Security Program Manager I-II (On-Site)","company":{"id":2202492,"name":"Community Partners Bank","domain":"cpb.bank","url":"https://alion.io/company/cpb-bank","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":{"grade":"B","score":75,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Management","role_family":"Management","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Honolulu, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":86503,"max":138365,"currency":"USD","period":"year","gross":null,"usd_annual":138365},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-01T19:06:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-25T14:51:48Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"Position Function:\nThe Application Security Program Manager is responsible for leading, governing, and continuously maturing the bank’s application security, identity management, fraud-related technology risk, and emerging technology risk programs within the Information Security Program. This role establishes the strategic direction, operating model, standards, risk assessment methodology, reporting, and multi-year roadmap needed to identity, assess, govern, and reduce risk across application environments.\nThis position has enterprise scope spanning internally developed applications, third-party hosted solutions, identity platforms, access administration processes, and critical business technologies that support customer-facing and internal operations. This role serves as a senior risk and control leader who partners across Technology, Digital Banking, Fraud, Enterprise Risk, Compliance, Internal Audit, Vendor Management, and other business leadership to align security requirements with business objectives and regulatory expectations.\nThey will serve as the bank’s senior Subject Matter Expert (SME) in areas related to application security controls, integrations, identity controls, fraud-enabling technology threats, and the security implications of emerging technologies. The role is accountable to lead risk assessments, defining treatment plans, overseeing control effectiveness, and reporting risk posture/key metrics, and advising on enterprise decisions.\nThe ideal candidate will have broad experience in technology, information security, risk management, securing applications, APIs, identity management, etc. They will work closely with the business and project teams to advocate security requirements to ensure applications and related security practices align with policies, standards, and best practices, while ensuring the security architecture and practices do not infringe on the needs of the business. The position requires taking initiative to research, resource, and be self-reliant when approaching projects and tasks, in addition to being an effective communicator.\nThey will be responsible for:\nDeveloping and maintaining information security risk management processes that are clear and understandable, workable, up-to-date, and reflect regulatory and CPB-specific requirements and issues. \nAssisting in communicating such processes throughout the business, including holding training sessions where appropriate. \nAssisting with the planning, coordination, implementation, and management of security measures that manage risks to systems. and data, to prevent unauthorized modification, destruction, or disclosure of information, including outsider service providers. \nAnalyzing and appraising new products and/or systems for security weaknesses and provide measures to prevent exposure and loss.\nPerforms all duties and interacts with internal and external customers in a manner aligned with the Company's Core Values of Voyaging Spirit and Positively Ohana; Customer Experience Competencies of Customer Interaction, Empowerment and Ownership; and Basic Skills of Listening, Oral Communication, Written Communication, Action Orientated, Thoroughness, Problem Solving.\nPrimary Accountabilities:\nResponsible for training staff on policies and standards related to application security and identity management best practices, and training staff on methodologies in conducting risk assessments related to this area.\nReviews/delegates work related to the governance and oversight of controls related to application security and identity management.\nLeads and motivates a team to ensure high levels of engagement, performance, and productivity.\nSets clear goals and expectations for team members and provides guidance on how to achieve them.\nConducts regular performance reviews to assess individual progress and provide constructive feedback.\nIdentifies skills gaps and provides opportunities for professional growth through training, mentorship, or cross-functional collaboration.\nLeads a risk-based application security review program to ensure appropriate security controls are designed, implemented, and operate effectively.\nValidating application and other reference architectures for security best practices, and recommending changes to enhance security and reduce risk where applicable.\nOverseeing application risk assessments and control reviews to identify weaknesses and drives remediation plans with accountable stakeholders\nLeads security risk evaluation for emerging technologies, new business initiatives, and material changes to the application and identity ecosystem.\nConducting or facilitating threat modeling of services and applications that tie to the risk and data associated with the application or services.\nDelivers operational security duties to include, but not limited to:\nProviding strategic oversight for application security tooling, processes and service models to support scalable coverage, risk visibility, and business enablement.\nConducting incident response exercises with colleagues throughout the organization and incorporating lessons-learned into existing security architectures and practices.\nConducting forensic analysis of security-related incidents in a manner consistent with best practices and the organization’s counsel.\nOther departmental duties and functions include, but not limited to:\nPerforming risk analyses pertaining to the security needs of the bank and preparing recommendations based on risk/exposure versus cost. Prepares and presents research findings in written and/or oral form. Presents objectives, alternatives, risk analyses, and cost/benefit analyses.\nAssists with the planning and directing of information security activities of the bank to ensure compliance with internal/external audits, and to federal and State regulations, which include FDIC, relevant sections of the Gramm-Leach-Bliley Act (GLBA), and Sarbanes-Oxley Act Section 404 provisions, and other duties to be assigned.\nMaintains an outward-facing and forward-looking view to provide solutions to ensure that the bank’s Information Security Program is current and relevant.\nDesigns, implements, and manages Information Security data identification, aggregation, analytics, and validation to meet department goals.\nCollaborates in developing and maintaining application security documentation (policies, standards, procedures, templates, etc.) that may be applied towards security governance in projects and operations:\nInitiates and executes on process improvements, policy/procedure updates, etc.\nTracks developments and changes in the digital banking and threat environments to ensure they are adequately addressed in security strategy plans.\nDocuments data flows of sensitive information within the organization (e.g., PII or ePHI) and recommends controls to ensure this data is adequately secured (e.g., encryption, tokenization, etc.).\nServes as the Subject Matter Expert in providing guidance in the areas of application security, identity management, and API security:\nParticipates in application and related infrastructure projects to provide security planning consulting.\nPartners with cross-functional teams to ensure security requirements are incorporated into processes and operations.\nLiaisons with the vendor management team to conduct security assessments of existing and prospective vendors, especially those with which the organization shares intellectual property, PII, ePHI, regulated or other protected data, including SaaS providers, cloud/infrastructure as a service (IaaS) providers, managed service providers, etc.\nProgram Manager Responsibilities:\nOwns the bank’s application security, identity governance, and fraud-related technology risk programs, and is accountable for strategy, governance, maturity, and measurable risk outcomes.\nEstablishes program objectives, control standards, operating procedures, risk tolerances, and performance metrics to ensure program effectiveness and regulatory alignment.\nDevelops and maintains multi-year roadmap for people, process, and technology capabilities, including investment priorities, control enhancements, and maturity targets.\nProvides leadership reporting and risk insights to Information Security leadership, executive stakeholders, governance committees, auditors, regulators, and others as appropriate.\nMinimum Qualifications:\nEducation:\nBachelor’s Degree from a 4-year university required, preferably in Information Security, MIS, Computer Science\nExperience:\nApplication Security Program Manager I:\n7+ years of experience and working knowledge in information security, application security, and regulations and privacy laws pertaining to release of information, and security and access control technologies, or equivalent experience required \n3+ years of experience in management or as a team lead with enterprise-wide cross-functional leadership responsibilities required \n1+ years of experience in financial services preferred \n2+ years of experience in leading risk assessments including control analysis, risk articulation, remediation planning, and executive communication preferred \n2+ years of experience presenting to senior management, governance committees, and regulators preferred \n1+ years of experience in data processing or analytics and related technical experience preferred \n1+ years of experience with identity governance and administration platforms and solutions preferred \nApplication Security Program Manager II:\n10+ years of experience and working knowledge in information security, application security, and regulations and privacy laws pertaining to release of information, and security and access control technologies, or equivalent experience required \n5+ years of experience in management or as a team lead with enterprise-wide cross-functional leadership responsibilities required \n2+ years of experience in financial services preferred \n2+ years of experience in leading risk assessments including control analysis, risk articulation, remediation planning, and executive communication preferred \n2+ years of experience presenting to senior management, governance committees, and regulators preferred \n1+ years of experience in data processing or analytics and related technical experience preferred \n1+ years of experience with identity governance and administration platforms and solutions preferred \nLicense/Certification:\nCISSP, CISA, TOGAF, SANS GCSA, or equivalent certification (Indicate Upon Hire) preferred \n\nPhysical Requirements & Working Conditions:\nMust be able to perform light physical work and to move or lift items including but not limited to boxes, files and papers up to 20 pounds unless otherwise as indicated.\nMust be able to operate and proficiently use standard office equipment, including phone, copier, personal computer and/or other work related mechanical or electronic devices and applications.\nMust be able to clearly communicate verbally and in writing with all internal and external customers. Must also be able to hear sufficiently to engage in daily discussions and interactions.\nMust be able to read and understand bank-related documents.\nMust be able to work in a conventional office setting, involving sitting at a desk or workstation for long periods of time. Must also be able to adapt to different work environments as needed to perform the job.\nWe are proud to be an EEO/AA employer M/F/D/V. We maintain a drug-free workplace and perform pre-employment substance abuse testing.","description_format":"text","description_chars":11496,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":5,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Commerce","Financial Services","Commercial & Retail Banks"],"lifecycle":[{"event":"open","at":"2026-10-03T05:32:25Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.84,"p_room":0.75,"age_days":23,"expected_fill_days":29,"reasons":["conf:0","urgency","win:late"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":138365,"is_top_pay":true},"html_url":"https://alion.io/job/we-got-you-application-security-program-manager-i-ii-on-site","json_url":"https://alion.io/job/we-got-you-application-security-program-manager-i-ii-on-site.json","meta":{"generated_at":"2026-10-25T15:14:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21963,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2202492},"rest":"https://alion.io/mcp/rest/get_company?id=2202492"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwe-got-you-application-security-program-manager-i-ii-on-site"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwe-got-you-application-security-program-manager-i-ii-on-site"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwe-got-you-application-security-program-manager-i-ii-on-site"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/we-got-you-application-security-program-manager-i-ii-on-site\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwe-got-you-application-security-program-manager-i-ii-on-site"}]}