240081-Senior Assistant Vice President

We are looking for a forward-thinking and skilled Application Security Leader to strengthen and drive our Application Security practice, with a focus on DevSecOps and cloud-native applications in EXL, a $2B Nasdaq-listed global cloud-native organization. This role demands a visionary leader with extensive experience in securing complex, multi-cloud and AI-based solutions/applications. This role is crucial as we enhance our Data and AI lead solutions capabilities, especially in the context of handling sensitive Health and Insurance data. The ideal candidate will have a proven track record of developing and implementing robust application security programs, ensuring the protection of critical business applications and data, and leading a high-performing team of security professionals. Collaborate with senior management and department leaders to identify opportunities to improve EXL's cloud security posture and establish a roadmap to mature the application security program. Responsibilities: Strategic Leadership: Develop and execute a comprehensive application security strategy that aligns with the organization's business goals and technology landscape. Lead and mentor a global team of application security professionals, fostering a culture of excellence and continuous improvement. Collaboration and Integration: Collaborate with development, DevOps, and IT teams to integrate security practices into the software development lifecycle (SDLC) and DevOps processes. Knowledge of secure coding principles and practices to prevent vulnerabilities such as SQL injection, XSS, and CSRF. Experience with static application security testing (SAST), dynamic application security testing (DAST), and interactive application security testing (IAST) tools. Work closely with product management and engineering teams to ensure security requirements are defined and implemented in new products and features. Establish and enable a high security baseline for all container environments across repositories, CI/CD pipelines and runtime analysis. Threat Management and Vulnerability Assessment: Oversee the identification and assessment of application security threats, vulnerabilities, and risks. Implement and manage vulnerability management programs, including regular security assessments, penetration testing, and code reviews. Regulatory Compliance and Reporting: Ensure compliance with relevant regulatory requirements and industry standards. Prepare and present regular reports on the status of application security programs, metrics, and incidents to executive leadership and the board of directors. Innovation and Continuous Improvement: Stay abreast of emerging security trends, threats, and technologies, and continuously evaluate and improve the organization's application security posture. Foster a culture of innovation, encouraging the adoption of advanced security technologies and practices. Primary Internal Interactions: Works in a consultative fashion with cross-functions EXL teams (Cloud CCOE, Domain Platform, Legal, Global Technology, Compliance) and external partners, advising on Cloud Security opportunities in a collaborative to improve information security efficiency and effectiveness Primary External Interactions: Interaction with vendors/ OEMs during Design, Implementation and Troubleshooting and ongoing service management. Technical Skills: Deep knowledge of application security frameworks, standards, and best practices Proficiency in DevSecOps, secure coding practices, threat modeling, and security testing methodologies Strong understanding of cloud platforms (AWS, Azure, GCP) and their security features. Cloud security administration Cloud security architecture Cloud network engineering Cloud engineering Cloud governance Container security or engineering Offensive Security Vulnerability Management Minimum security Baseline Secure Configuration Audit Application Security Breach Attack Simulation Security Architecture Threat Modelling Architecture Review Soft Skills: Cloud security administration Ability to handle senior management escalation - Vendor management Skills Effective communication Proficient team leader Business Acumen Decision making and communication Risk management skills Knowledge of latest cybersecurity trends & global industry best practices pertaining to financial Industry Operational experience in a Global-multi Industry-Regulated-Growth business environment Knowledge of Advanced Cyber Security Capabilities in the Industry Cyber Risk Management mindset Self-Started & Sense of PurposeEXL is the indispensable partner for leading businesses in data-led industries such as insurance, banking and financial services, healthcare, retail and logistics. We bring a unique combination of data, advanced analytics, digital technology and industry expertise to help our clients turn data into insights, streamline operations, improve customer experience, and transform their business. Our partnerships with clients are built on a foundation of collaboration - and we've been chosen as a partner by nine of the top ten leading US insurance companies, nine of the top 20 global banks, and six of the top ten US health care payers. We function as one team to make your goals our goals, whether that's unlocking the value of generative AI or embedding analytics into workflows that reduce risk or power your growth. Clients choose EXL as their transformation partner for many reasons. Our geographic diversity make talent all over the world instantly accessible. Digital accelerators enable unmatched speed-to-value, letting you realize results fast. It's our people that truly set us apart, though, including the 1,500 data scientists we have dedicated to our generative AI practice. And our more than twenty years of experience in delivering business services, garnering stellar client references, and maintaining a solid balance sheet are reassuring to our C-suite clients. Find out for yourself why clients, employees, and analysts think we're some of the best in the business. Contact us to see how we can help you achieve your goals.