Associate Director managing IT Product Development at Marsh McLennan. Leading security initiatives and collaborating with engineering teams in a hybrid working environment.
Responsibilities
Conduct comprehensive security-focused pull request reviews across multiple applications and technology stacks
Design, develop, and maintain reusable security libraries, frameworks, and boilerplate code for development teams
Establish and enforce secure coding standards through technical guidance and code review processes
Create and maintain security-focused development tools, linters, and automated checks
Review and provide technical input on application architectures from a security perspective
Participate in design reviews and technical discussions to ensure security best practices are embedded from the ground up
Perform threat modeling and security architecture assessments for new and existing applications
Collaborate with engineering teams to design secure, scalable solutions that meet business requirements
Serve as the senior technical member within the Security Champion community across MMC
Mentor and guide other security champions, providing technical expertise and best practice guidance
Lead technical discussions regarding proposed changes to Application Security Standards and guidelines
Act as resident security expert and technical consultant across multiple application portfolios
Actively contribute to secure application development through hands-on coding and technical implementation
Integrate security controls and features into applications (RBAC, authentication, authorization, encryption, etc.)
Develop and maintain security testing frameworks and automated security validation tools
Contribute to the design and implementation of security infrastructure and deployment pipelines
Establish and maintain technical security standards, guidelines, and best practices for development teams
Provide technical guidance on vulnerability assessment, triaging, and remediation approaches
Review and validate security incident remediation, including secrets management and disposal
Ensure alignment with industry standards (OWASP Top 10, SANS Top 25, CWE) and internal security policies
Work closely with development teams, product owners, and architects to integrate security seamlessly into the development process
Serve as technical liaison between development teams and global information security
Provide technical training and knowledge sharing sessions on secure development practices
Communicate complex security concepts clearly to both technical and non-technical stakeholders
Requirements
Bachelor's degree in Computer Science, Engineering, or equivalent technical experience
Overall experience of 14+ years, 7+ years of software development experience with strong engineering fundamentals
Expert-level proficiency in multiple programming languages (JavaScript/TypeScript, Python, Java, C#, etc.)
Deep understanding of modern application architectures, microservices, and cloud platforms (Azure, AWS)
Extensive experience with CI/CD pipelines, DevOps practices, and infrastructure as code
Advanced knowledge of secure coding practices, common vulnerabilities, and security testing methodologies
Advanced expertise in application security principles, practices, and industry standards
Experience with security testing tools (SAST, DAST, IAST, dependency scanning)
Deep understanding of authentication, authorization, cryptography, and secure communication protocols
Knowledge of threat modeling methodologies and security architecture patterns
Experience with security frameworks and compliance requirements (SOC 2, ISO 27001, NYDFS, etc.)
Proven track record of leading technical initiatives and mentoring development teams
Excellent communication skills with ability to influence and educate technical and non-technical audiences
Experience working in distributed, cross-functional teams across multiple time zones
Strong problem-solving skills with ability to balance security requirements with business needs
Benefits
Professional development opportunities
Interesting work
Supportive leaders
Vibrant and inclusive culture
Career opportunities
A range of benefits and rewards to enhance well-being
Associate Director leading innovation initiatives for LGBTQ+ health at Penn. Overseeing project execution and sustainability strategies to improve health outcomes.
Associate Director of Biostatistics leading clinical biostatistics globally in drug development. Collaborating with cross - functional teams and mentoring statisticians for innovative statistical methods.
Associate Director leading medical information strategy for Regeneron’s therapeutic areas. Managing tactical execution of medical affairs plans and providing scientific support for healthcare professionals.
Executive Director leading oncology asset development and drug strategy at a healthcare company. Responsible for strategies across all phases from discovery to reimbursement.
Associate Director driving Lean Transformation and Continuous Improvement in a global healthcare leader. Engaging with business leaders to enhance operational performance across multiple sites.
Associate Director for Contracts providing senior - level leadership in negotiating complex research agreements. Overseeing compliance and operational procedures in grants and contracts within Rice University.
Director overseeing eDiscovery delivery operations at Kroll in India. Leading a high - performing team for complex investigations and litigation support.
Regional Director of Outreach leading the outreach team in the Southeast US, focusing on behavioral health relationships and ensuring strategic goals are met. Responsibilities include team development, outreach strategy, and stakeholder engagement.
Director managing strategic advocacy initiatives to ensure patient access for Johnson & Johnson Innovative Medicine. Developing partnerships and executing plans to shape healthcare policies affecting access.
Regional Director managing Cardiovascular sales and clinical teams within D.C./Virginia. Aiming to improve patient outcomes while achieving sales growth in medical device sector.