Asst Manager - Cyber Security

Asst Manager - Cyber Security

Product Owner – AppSec Outcomes & Roadmap

Role Purpose

The Vendor shall provide a Product Owner responsible for owning outcomes, defining priorities, and managing the roadmap for the Application Security Migration, Automation, and Compliance program. The Product Owner ensures that AppSec capabilities are delivered in alignment with tier‑based security requirements, quarterly milestones, and compliance objectives, while coordinating execution across Client AppSec functional areas.

Scope of Responsibilities

Outcomes Ownership

• Own and drive measurable delivery outcomes for AppSec migration, automation adoption, and compliance enablement.
• Ensure outcomes align with Client objectives for risk reduction, control coverage, and operational efficiency.
• Validate completion criteria for security migrations, automation enablement, and governance readiness.

Roadmap & Prioritization

• Own and maintain the AppSec product roadmap aligned to Tier 1, 2, and 3 application security requirements and quarterly deployment targets (Q1–Q4 2026).
• Define and prioritize epics, features, and initiatives supporting:
  • CI/CD security automation (SAST, DAST, SCA)
  • ServiceNow AVR integration and automation
  • Threat modeling and penetration testing enablement
• Continuously reprioritize backlog based on risk, dependencies, compliance needs, and Client direction.

Cross‑Functional Enablement

• Act as the primary point of alignment between AppSec stakeholders and supporting functional teams including:
  • Vulnerability Operations
  • Application Security Champions (ASC/CoP)
  • Threat Modeling
  • ASX and Secure Design
  • Engineering enablement
  • Penetration Testing
• Ensure functional teams are aligned to roadmap priorities and expected outcomes.

Governance & Transparency

• Define success metrics and KPIs for automation coverage, compliance adherence, and delivery effectiveness.
• Ensure roadmap progress and outcomes are visible through standardized dashboards and reporting.
• Contribute to weekly status updates and monthly executive summaries from an outcomes and value‑delivery perspective.

Scope & Compliance Control

• Ensure roadmap delivery remains within defined SOW scope.
• Confirm the Product Owner role does not perform application development, remediation, infrastructure security, procurement, or custom reporting.

Key Skills & Experience

• Strong experience as a Product Owner or Product Manager in large, enterprise technology or security programs.
• Demonstrated ability to own roadmaps, prioritization, and outcomes delivery across multiple teams.
• Working knowledge of Application Security domains and enterprise delivery models.
• Ability to operate effectively in vendor‑augmented, SOW‑driven environments.