Partnering with mission-driven entrepreneurs to build Rocky Mountain technology companies of impact, utility, and value.

Join our team to ensure a consistent and effective risk management program globally for third party-hosted applications.

As an Application Security Expert, in Corporate Third Party Oversight you will ensure consistent and effective end-to-end risk management program is in place globally for third party-hosted applications. You will influence internal and external stakeholders to inform and ultimately mitigate third party application risk across the firm.

Job Responsibilities

• Drive the transformation agenda, including business justification and program build out.
• Partner with internal risk teams to support business as usual risk activities, reporting and project initiatives.
• Ensure risk impacting the business is effectively identified, quantified, communicated and remediated
• Influence supplier adoption of the product vision, roadmap, and risk control objectives
• Operationalize the Third Party Software Bill of Materials (SBOM) program

Required qualifications, capabilities, and skills

• 5+ years of experience in Third Party Risk Management (TPRM) or Governance, Risk Management, and Compliance (GRC), Cybersecurity, Application Security, Cloud Security Architecture (SaaS, PaaS & IaaS) within a large enterprise level environment
• 3+ years of experience using a broad set of technologies (e.g., servers, operating systems, applications, databases, hypervisors, virtualization management, containers, compute, storage, etc.)
• Strong leadership skills, ability to multitask, sense of ownership, attention to detail and quality, and deliver on commitments
• Understanding of Secure Software Development Life Cycle (SSDLC) (e.g., coding requirements, risk assessments, threat modeling, static code analysis, and dynamic application scanning)

Preferred qualifications, capabilities, and skills

• Certification in Public Cloud Technology from major Cloud Service Provider
• Experience with Software Bill of Materials (SBOM)
• CISSP, CISA, CISM, CCSP or CRISC certification