• Develop, implement, and maintain a comprehensive application security strategy aligned with business objectives and industry best practices. • Lead and mentor the app security team, fostering a culture of security awareness and continuous improvement across the organization. • Report to leadership on the status of the application security program, including risk posture, incidents, and performance metrics. • Evaluate and recommend new application security technologies and tools to enhance the organization's security posture. • Oversee the day-to-day security operations, including monitoring, threat detection, incident response, and vulnerability management. • Design, implement, and manage security controls for our cloud-based SaaS platform (AWS), corporate network, and endpoints. • Conduct regular application security assessments, penetration tests, and vulnerability scans, and manage the remediation of identified issues. • Maintain an application security risk management framework, identifying, analyzing, and treating risks. • Ensure compliance with relevant regulatory requirements and industry standards (e.g., ISO 27001, NIST, PCI DSS, GDPR). • Maintain and enforce application security policies, standards, and procedures. • Liaise and coordinate internal and external security audits. • Lead the security incident response team, managing all phases of the incident lifecycle from detection and containment to eradication and recovery. • Conduct post-incident reviews to identify root causes and implement preventative measures. • Manage, mentor, and develop the application security team.