Senior Assistant Vice President

We are looking for a forward-thinking and skilled Application Security Leader to strengthen and drive our Application Security practice, with a focus on DevSecOps and cloud-native applications in EXL, a $2B Nasdaq-listed global cloud-native organization. This role demands a visionary leader with extensive experience in securing complex, multi-cloud and AI-based solutions/applications.

This role is crucial as we enhance our Data and AI lead solutions capabilities, especially in the context of handling sensitive Health and Insurance data.

The ideal candidate will have a proven track record of developing and implementing robust application security programs, ensuring the protection of critical business applications and data, and leading a high-performing team of security professionals.

Collaborate with senior management and department leaders to identify opportunities to improve EXL’s cloud security posture and establish a roadmap to mature the application security program.

Responsibilities:

• Strategic Leadership:

• Develop and execute a comprehensive application security strategy that aligns with the organization’s business goals and technology landscape.
• Lead and mentor a global team of application security professionals, fostering a culture of excellence and continuous improvement.

• Collaboration and Integration:

• Collaborate with development, DevOps, and IT teams to integrate security practices into the software development lifecycle (SDLC) and DevOps processes.
• Knowledge of secure coding principles and practices to prevent vulnerabilities such as SQL injection, XSS, and CSRF.
• Experience with static application security testing (SAST), dynamic application security testing (DAST), and interactive application security testing (IAST) tools.
• Work closely with product management and engineering teams to ensure security requirements are defined and implemented in new products and features.
• Establish and enable a high security baseline for all container environments across repositories, CI/CD pipelines and runtime analysis.

• Threat Management and Vulnerability Assessment:

• Oversee the identification and assessment of application security threats, vulnerabilities, and risks.
• Implement and manage vulnerability management programs, including regular security assessments, penetration testing, and code reviews.

• Regulatory Compliance and Reporting:

• Ensure compliance with relevant regulatory requirements and industry standards.
• Prepare and present regular reports on the status of application security programs, metrics, and incidents to executive leadership and the board of directors.

• Innovation and Continuous Improvement:

• Stay abreast of emerging security trends, threats, and technologies, and continuously evaluate and improve the organization’s application security posture.
• Foster a culture of innovation, encouraging the adoption of advanced security technologies and practices.

• Primary Internal Interactions:

• Works in a consultative fashion with cross-functions EXL teams (Cloud CCOE, Domain Platform, Legal, Global Technology, Compliance) and external partners, advising on Cloud Security opportunities in a collaborative to improve information security efficiency and effectiveness

• Primary External Interactions:

• Interaction with vendors/ OEMs during Design, Implementation and Troubleshooting and ongoing service management.

• Technical Skills:

• Deep knowledge of application security frameworks, standards, and best practices
• Proficiency in DevSecOps, secure coding practices, threat modeling, and security testing methodologies
• Strong understanding of cloud platforms (AWS, Azure, GCP) and their security features.
• Cloud security administration
• Cloud security architecture
• Cloud network engineering
• Cloud engineering
• Cloud governance
• Container security or engineering
• Offensive Security
• Vulnerability Management
• Minimum security Baseline
• Secure Configuration Audit
• Application Security
• Breach Attack Simulation
• Security Architecture
• Threat Modelling
• Architecture Review

• Soft Skills:

• Cloud security administration
• Ability to handle senior management escalation - Vendor management Skills
• Effective communication
• Proficient team leader
• Business Acumen
• Decision making and communication
• Risk management skills
• Knowledge of latest cybersecurity trends & global industry best practices pertaining to financial Industry
• Operational experience in a Global-multi Industry-Regulated-Growth business environment
• Knowledge of Advanced Cyber Security Capabilities in the Industry
• Cyber Risk Management mindset
• Self-Started & Sense of Purpose