Director Application Security Cybersecurity

Profile

At Bristol Myers Squibb, we are inspired by a single vision - transforming patients' lives through science.In oncology, hematology, immunology and cardiovascular disease - and one of the most diverse and promising pipelines in the industry - each of our passionate colleagues contribute to innovations that drive meaningful change. We bring a human touch to every treatment we pioneer. Join us and make a difference.

The Director of Application Security is responsible for developing the overall strategy and execution of BMS's Application Security Program, which includes establishing an overall Framework for governing Application Security across BMS, interacting with key stakeholders, establishing and executing on a roadmap to enhance Secure SDLC controls, interfacing and managing suppliers, rationalizing processes and technologies, and driving application security training and awareness efforts across the company to reduce risk.

Position Responsibilities:


Serve as a key member of the BMS Cybersecurity Operations team, accountable for Application Security
Build out an integrated App Sec program and provide subject matter expertise for key areas including but not limited to
Secure Requirements and Threat Modeling
Static Code Analysis
Dynamic Application Security Testing
Open Source Security
CI/CD Integration and DevSecOps
Training and awareness for in-house developers (recognizing this is limited scope)
Develop Application Security Governance artifacts including policies, standards and procedures
Manage service providers for established Application Security services
Provide direct and indirect management support to team members, including contractors and service provider resources
Establish relationships with application teams and Interface with key stakeholders around Application Security findings, including remediation guidance
Drive education and training efforts and develop key themes for training e.g. OWASP Top 10
Establish Application Security requirements and expand App Sec controls with service providers that develop BMS applications
Interface and support Vulnerability Management and Attack Surface Reduction teams
Work closely with Cybersecurity colleagues to contribute to the broader program
Provided extended support for broader Cyber Operations horizontal functions
Support audits and other key requests within Cyber Operations


Desired Experience:


Bachelor's degree in Computer Science, Information Systems, or equivalent education or work experience
5 years of prior relevant experience (experience required commensurate with role)
Deep knowledge of Windows OS, MAC OS and Mobile platforms
Experience with Static Code Analysis capabilities
Experience with Dynamic Application Security tools
Experience with Open Source Security
Ability to present on Application Security topics to a developer audience
Strong knowledge of AWS security concepts and practices
Supplier experience
Experience working with internal auditors
Experience defining and monitoring and reporting Cybersecurity metrics
Experience with contributing to Cybersecurity policies and Standard Operating Procedures
Security certifications including CISSP, CSSLP, CISM, AWS Architect, AWS Security are a plus.
Seasoned direct and matrix management skills, with a particular emphasis on energizing and developing talent.
Working knowledge of agile methodologies applied to SDLC and IT services.
Excellent communication and collaboration skills


Around the world, we are passionate about making an impact on the lives of patients with serious diseases. Empowered to apply our individual talents and diverse perspectives in an inclusive culture, our shared values of passion, innovation, urgency, accountability, inclusion and integrity bring out the highest potential of each of our colleagues.

Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives.

Company: Bristol-Myers Squibb

Req Number: R1527320_EN

Updated: 2020-07-07 00:00:00.000 UTC

Location: Princeton,New Jersey

Bristol Myers Squibb is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, pregnancy, citizenship, marital status, gender expression, genetic information, political affiliation, or any other characteristic protected by law.

Company info

Sign Up Now - WashingtondcCrossing.com