application security manager resume example with 20+ years of experience
Jessica
Claire
resumesample@example.com
(555) 432-1000,
, , 100 Montgomery St. 10th Floor
:
Professional Summary
Senior Information Technology Executive with strong experience in lifecycle and information technology project management methodologies to produce superior results. Skilled in senior-level metrics reporting to support and integrate divergent data sources and monitor performance strategy. Leverages extensive Project Portfolio, Security and QA knowledge to meet operational goals within the organization.
Skills
Communication and Presentation Skills
Supervisory Skills
Information Security
Security Awareness and Education
Security Assessments
Incident and Vulnerability Management
Knowledge of Regulation and Compliance with Standards
Risk Management and Risk Assessment
Education
Devry Institute Of TechnologyIrving, TX, Expected in 10/1996 ā āBachelor of Science:Computer Information Systems - GPA:
3.96 GPA Summa Cum Laude
Certifications
CISSP (Certified Information Systems Security Professional )
CCSP (Certified Cloud Security Professional )
CSSLP (Certified Secure Software Lifecycle Professional )
Accomplishments
Established an automated AppSec services for company IP's.
This resulted in providing all IP group a single point for AppSec security needs eliminating duplication of services.
Renegotiated key contracts with vendors which drove over $250k in savings for the Global AppSec Program at UNICEF.
Improved productivity while reducing staffing and operational costs by 50%.
Created and launched a global PPM solution which eliminated need for paper-based forms.
Created custom workflows and templates which reduced the time to create Business Cases and supporting documents from 4-6 weeks to 2-4 days.
Established key process indicators (KPI's) and implemented preventive and corrective actions to eliminate root causes of poor quality and delivery problems.
Work History
Airtable - Application Security Manager New York, NY, 01/2010 - Current
Overhauled the security tools, standards, and processes to deliver a complete DevSecOps framework.
Analyzed application security processes as it relates to application, risk management, threat modelling, security testing, compliance, penetration testing and provided process governance.
Established security requirements for test driven design.
Guided Vendor development activities to ensure 3rd party software and development met UNICEF security standards.
Ensured that developers and QA personnel were trained with the appropriate level of security knowledge to perform their daily activities including secure coding best practices.
Organized presentations and workshops on application security topics to respective leadership and management.
Produced Key Performance Indicators (KPIs) for the application security assurance program.
Delivered penetration testing services with Managed Security Services Provider; MicroFocus, through the Fortify on Demand platform.
Facilitated information security audits, both internal and third party.
Integrated threat modeling practices into the Software Development life Cycle (SDLC).
State Of North Carolina - IT Project Portfolio Manager Sanford, NC, 01/2000 - 01/2010
Provided Governance and Oversight for UNICEF's $40m IT Applications Portfolio.
Developed suite of Project Management templates covering entire project lifecycle (Feasibility Study, Business Case, to Project Closure and Lessons Learned).
Formulated RFP for selection of PPM solution.
Developed training, policies and procedures to support users of PPM Platform, Project Managers, Business Analysts, Dev Teams and other Project Stakeholders.
Identified all projects in pipeline, including potential projects, by gathering key project and organizational information.
Performed What-if and Scenario Analysis to ensure proper allocation of resources and budgets. Reallocated resources when necessary.
Parts Town - Software QA Manager Castleton, IN, 10/1996 - 01/2000
Spearheaded the development of over 10,000 test cases for the SAP ecosystem at UNICEF. Resulted in over 90% test coverage for all major modules including business rules and audit controls.
Planned and devised cohesive test plans for numerous projects using Agile and Scrum technologies.
Tracked, prioritized and organized defects with Azure DevOps, working with QA Analysts and development teams to facilitate timely corrections.
Effectively interacted with Project Managers and business divisions regarding software defects and security issues, working closely to develop innovative solutions.
Gathered data on integration issues and vulnerabilities and reported all findings, including improvement recommendations.
Evaluated function, performance and design compliance of every product against design standards and customer needs.
Affiliations
The International Information System Security Certification Consortium ( (ISC)Ā²
Any information uploaded, such as a resume, or input by the user is owned solely by the user, not LiveCareer. For further information, please visit our Terms of Use.