Global Application Security Head - IT

Associate Director Application Security practice

The Role:

Foremost an effective executive who nurtures a practice that help clients to add value from established and emerging technologies. Established experts in their area, they are responsible for driving profitable growth through the execution of the strategy and the strengthening of the portfolio within an emerging Area. Dynamic leaders that inspire pride and excitement, they establish strong communities of practice that attract the best talent and ensure an environment of continuous learning and innovation. Drive the customers to rethink their business models acting as a strategic advisor working on high impact Platform/ecosystem activities. Constantly growth and expand our platform/ecosystem footprint. Accountable for platform/ecosystem related sales work and developing long term client relationships where applicable.

Accountabilities:

- Platform / Application Security Strategy

- Assess client's application security landscape, evaluate and suggest most suitable security tools & techniques to create a threat resilient landscape using differentiated methods and create impactful client solutions

- Provide application security concept, framework & standards support for development & support delivery teams for the solution design, customization build and roll out to end users

- Collaborate with other practice groups to review the effects of new threats and vulnerabilities in the security space to assess, remediate, test and protect client application artefacts, data and enterprise ecosystems from threat vectors as they emerge

- Work with other technology groups to provide cohesive solutions in Application Security encompassing architecture, standards and implementation related mandates for development, deployment and maintenance of custom and package applications

- Manage teams delivering co-working discovery workshops & support delivery teams to provide assessment, remediation, testing and standards refresh for the application security practice

- Present and distill complex Security solutions into simple, easy to understand concepts for both technical and non-technical audiences especially in the context of opportunity pursuit

- Drive Innovation Through Offerings

- Drive profitable growth through the execution of the strategy and the strengthening of the Application security practice at IDC GDN location to c200 practitioners by Aug- 18

- Building innovative & collaborative solutions to bring combined offerings such as security related combinations with J2C, API, Data security as advisory & execution footprint to capture opportunities .

- Bring the application security practice to life to achieve sales and commercial opportunities in a collaborative ecosystem and follow through with support for cost effective high quality execution

Capabilities:

- Client Relationship Building and Management

Establish and sustain long-term profitable client relationships that drive value creation, delivery excellence and a positive client work environment. Leads the client lifecycle from initial contact through delivery. Manages client expectations and client satisfaction. Acts as an advisor and partner to the client. Works with the client to minimize delivery disruptions and effectively manages client urgencies.

- Continuous Improvement Strategy

An ongoing effort to improve products, services, or processes. These efforts can seek "incremental" improvement over time or "breakthrough" improvement all at once.

- Technical Capabilities

- 15+ years of experience with hands on exposure to application security related technology design, delivery and maintenance work.

- Comprehensive understanding of static and dynamic code analysis in application security and ability to provide effective remediation for identified vulnerabilities

- Working level familiarity with Static and Dynamic Analysis tools (SAST, DAST, IAST)

- Ability to manage deployment & use of OWASP tools and methodologies

- Working level familiarity with relevant vulnerability scanning tools (e.g., Qualys, Nessus, Nexpose, Saint or any other open source tools)

- Working level familiarity with web application vulnerability scanning tools (e.g., IBM AppScan, HP Fortify, Accunetix, NTO Spider, Burpsuite Pro or any other open source tools)

- Ability to elucidate vulnerabilities and weaknesses in the OWASP Top10,WASCTCv2, SANS Top-25 and CWE25 to client IT/ISO audiences and discuss effective defensive techniques.

- Comprehensive understanding and previous oversight of IT hardware, software, networking, databases, API services, J2C and related hosting needs as well as familiarity with application development and delivery concepts including programming

- Innovation Strategy

Design, develop and implement business strategies for clients to implement new and different approaches to business based on the innovation approach.

- Offering Acumen

Position and leverage a standard offering and its service definitions as the starting point for all client solutions during the sales, mobilization or delivery stages of deals.

- Sales Enablement

Utilize process and organizational knowledge to assist account teams, client teams and sales teams in collaborating across the organization and identify continuous improvement activities that would contribute to improved sales performance.

- Technology and Environment Enablement

Design and execute technical architectures, establish voice and data connectivity, establish system test environments, establish workstations and system access, implement standard technologies and scale document management.

- Value Driver Identification and Assessment

Assist clients in the identification and assessment of appropriate value drivers based on strategic themes.

Our expectations:

- Maximizes business impact and value creation

- Consistently demonstrates sound business understanding and judgment.

- Navigates through short and long term agenda with agility.

- Creates and applies innovative solutions, executed against business strategy and grounded in economic value to address client/customer needs.

- Focuses on delivering excellence

- Drives improvement of quality and value of service delivery through non-negotiable standards of performance.

- 'Tries smarter- versus - Tries harder- .

- Assesses, designs, implements, and executes processes and programs supporting operating strategy

- Collaborates effectively

Achieves goals, leveraging our global network, by working together and openly sharing ideas, knowledge and resources

- Remains globally connected and locally relevant.

- Develops and consistently applies a naturally collaborative approach, being responsive and following through on commitments.

- Navigates client/customer politics effectively to create and maintain value added relationships based on mutual respect and trust.

- Communicates effectively

Presents ideas clearly and concisely in verbal and written communications.

- Employs a clear and direct communication style and projects business confidence and presence to influence and engage others effectively.

- Creates and communicates a compelling vision.