Let's begin! Senior Vice President- Application Security
Job Location:
Charlotte, NC - USA
Monthly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
At Moodys we unite the brightest minds to turn todays risks into tomorrows opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they arewith the freedom to exchange ideas think innovatively and listen to each other and customers in meaningful ways. Moodys is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment were advancing AI to move from insight to actionenabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity helping our clients navigate uncertainty with clarity speed and confidence.
If you are excited about this opportunity but do not meet every single requirement please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship lead with curiosity champion diverse perspectives turn inputs into actions and uphold trust through integrity.
- 15 years of progressive cybersecurity experience including significant leadership experience in Application Security Product Security or related security disciplines
- Deep expertise in secure software development lifecycle practices threat modeling secure architecture and design reviews secure coding standards OWASP Top 10 CWE and modern application security programs
- Strong software engineering background with the ability to review and assess production code and influence engineering organizations as a trusted technical leader
- Proven experience implementing and scaling DevSecOps practices including security automation AI-enabled security capabilities SAST DAST IAST SCA CI/CD security integration and software supply chain security controls; experience leveraging AI to enhance security operations risk identification and engineering efficiency is preferred
- Strong knowledge of modern technology architectures including cloud-native environments microservices containers Kubernetes APIs and SaaS platforms
- Demonstrated success building and leading high-performing global teams driving enterprise-wide security transformation and influencing outcomes across multiple levels of leadership
- Exceptional executive communication and stakeholder management skills with the ability to translate complex technical risks into actionable business decisions for senior leaders clients auditors regulators and boards
- Experience leading Vulnerability Management Detection and Response (VMDR) Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) programs within large complex or regulated organizations is a plus
- Bachelors degree in Computer Science Engineering Information Security or a related field or equivalent practical experience
- Advanced degree (Masters degree or MBA) and/or relevant certifications such as CISSP CSSLP CISM GWAPT or OSCP are a plus
- Define own and evolve the enterprise Application Security strategy roadmap and operating model in alignment with business objectives and the broader cybersecurity program
- Build lead and develop a global organization of Application Security Product Security and DevSecOps professionals fostering innovation accountability and continuous learning
- Embed security throughout the software development lifecycle by establishing secure-by-design and secure-by-default practices across engineering teams
- Drive adoption of threat modeling secure coding standards secure design reviews automated security testing and software supply chain security controls
- Provide strategic oversight for the enterprise Vulnerability Management Detection and Response (VMDR) program including risk-based prioritization remediation governance penetration testing and security metrics reporting
- Guide Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) capabilities in partnership with platform and engineering teams supporting security baselines guardrails continuous monitoring and remediation strategies
- Consolidate application cloud and SaaS security findings into a unified view of enterprise risk enabling data-driven prioritization and decision-making
- Partner with Engineering Product Infrastructure Risk Legal Privacy Compliance and executive stakeholders to strengthen security posture regulatory readiness and shared ownership of cyber risk
For US-based roles only: the anticipated hiring base salary range for this position is $228000 - $333150.00 depending on factors such as experience education level skills and location. This range is based on a full-time addition to base salary this role is eligible for incentive compensation. Moodys also offers a competitive benefits package including not but limited to medical dental vision parental leave paid time off a 401(k) plan with employee and company contribution opportunities life disability and accident insurance a discounted employee stock purchase plan and tuition reimbursement.
Moodys is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color sex gender age religion or creed national origin ancestry citizenship marital or familial statussexual orientation gender identity gender expression genetic information physical or mental disability military or veteran status or any other characteristic protected by law. Moodys also provides reasonable accommodation to qualified individuals with disabilities or based on a sincerely held religious belief in accordance with applicable laws. If you need to inquire about a reasonable accommodation or need assistance with completing the application process please email . This contact information is for accommodation requests only and cannot be used to inquire about the status of applications
For San Francisco positions qualified applicants with criminal histories will be considered for employment consistent with the requirements of the San Francisco Fair Chance Ordinance.
This position may be considered a promotional opportunity pursuant to the Colorado Equal Pay for Equal Work Act.
Click here to view our full EEO policy statement. Click here for more information on your EEO rights under the law. Click here to view our Pay Transparency Nondiscrimination statement.
Candidates for Moodys Corporation may be asked to disclose securities holdings pursuant to Moodys Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy including remediation of positions in those holdings as necessary.
Required Experience:
Senior Exec
About Company
Moody's CreditView is our flagship solution for global capital markets that incorporates credit ratings, research and data from Moody's Investors Service plus research, data and content from Moody's Analytics.
