Application Security and Risk Officer

Experience Level : 6-9 Years

Position Overview

We are seeking a skilled and motivated Application Risk Manager, responsible for leading the strategy, oversight, and execution of risk management practices related to enterprise applications. This role ensures that application development, deployment, and operations align with the organization’s risk appetite, regulatory requirements, and resilience objectives. The leader will partner with engineering, architecture, cybersecurity, and compliance teams to proactively identify, assess, and mitigate technology risks across the application lifecycle.

Key Responsibilities

• Develop and maintain a comprehensive application risk framework aligned with enterprise risk management standards.
• Lead risk assessments for new and existing applications, including cloud-native, legacy, and third-party platforms.
• Oversee control design and effectiveness reviews for application development, testing, deployment, and change management.
• Collaborate with DevOps and engineering teams to embed risk controls into CI / CD pipelines and agile workflows.
• Monitor and report on key risk indicators (KRIs) and risk OKRs related to application performance, reliability, and compliance.
• Partner with cybersecurity to address application-level vulnerabilities, secure coding practices, and threat modeling.
• Drive incident response readiness for application-related outages, data integrity issues, and third-party failures.
• Support internal and external audit activities, ensuring timely remediation of findings.
• Lead risk governance forums and present risk posture updates to senior leadership and board committees.

Required Skills & Experience

Nice to Have Skills

What We Offer