Associate Director managing IT Product Development at Marsh McLennan. Leading security initiatives and collaborating with engineering teams in a hybrid working environment.
Responsibilities
Conduct comprehensive security-focused pull request reviews across multiple applications and technology stacks
Design, develop, and maintain reusable security libraries, frameworks, and boilerplate code for development teams
Establish and enforce secure coding standards through technical guidance and code review processes
Create and maintain security-focused development tools, linters, and automated checks
Review and provide technical input on application architectures from a security perspective
Participate in design reviews and technical discussions to ensure security best practices are embedded from the ground up
Perform threat modeling and security architecture assessments for new and existing applications
Collaborate with engineering teams to design secure, scalable solutions that meet business requirements
Serve as the senior technical member within the Security Champion community across MMC
Mentor and guide other security champions, providing technical expertise and best practice guidance
Lead technical discussions regarding proposed changes to Application Security Standards and guidelines
Act as resident security expert and technical consultant across multiple application portfolios
Actively contribute to secure application development through hands-on coding and technical implementation
Integrate security controls and features into applications (RBAC, authentication, authorization, encryption, etc.)
Develop and maintain security testing frameworks and automated security validation tools
Contribute to the design and implementation of security infrastructure and deployment pipelines
Establish and maintain technical security standards, guidelines, and best practices for development teams
Provide technical guidance on vulnerability assessment, triaging, and remediation approaches
Review and validate security incident remediation, including secrets management and disposal
Ensure alignment with industry standards (OWASP Top 10, SANS Top 25, CWE) and internal security policies
Work closely with development teams, product owners, and architects to integrate security seamlessly into the development process
Serve as technical liaison between development teams and global information security
Provide technical training and knowledge sharing sessions on secure development practices
Communicate complex security concepts clearly to both technical and non-technical stakeholders
Requirements
Bachelor's degree in Computer Science, Engineering, or equivalent technical experience
Overall experience of 14+ years, 7+ years of software development experience with strong engineering fundamentals
Expert-level proficiency in multiple programming languages (JavaScript/TypeScript, Python, Java, C#, etc.)
Deep understanding of modern application architectures, microservices, and cloud platforms (Azure, AWS)
Extensive experience with CI/CD pipelines, DevOps practices, and infrastructure as code
Advanced knowledge of secure coding practices, common vulnerabilities, and security testing methodologies
Advanced expertise in application security principles, practices, and industry standards
Experience with security testing tools (SAST, DAST, IAST, dependency scanning)
Deep understanding of authentication, authorization, cryptography, and secure communication protocols
Knowledge of threat modeling methodologies and security architecture patterns
Experience with security frameworks and compliance requirements (SOC 2, ISO 27001, NYDFS, etc.)
Proven track record of leading technical initiatives and mentoring development teams
Excellent communication skills with ability to influence and educate technical and non-technical audiences
Experience working in distributed, cross-functional teams across multiple time zones
Strong problem-solving skills with ability to balance security requirements with business needs
Benefits
Professional development opportunities
Interesting work
Supportive leaders
Vibrant and inclusive culture
Career opportunities
A range of benefits and rewards to enhance well-being
Director of After School Programs at Camp Fire Alaska empowering youth through community programs and partnerships. Leading teams and ensuring quality across after - school initiatives in Anchorage, Alaska.
Adjoint Director managing medical and social establishments in France. Leading strategic projects and coordinating resources with a focus on patient care and quality improvement.
Publishing Director responsible for driving commercial growth and audience engagement in B2B media. Leading strategic decisions across a portfolio of brands in a hybrid work environment.
Director leading the Influencer & Celebrity Relations team at BPCM, a women - led PR agency. Collaborating with teams across LA, NY, and London to drive celebrity partnerships.
Leadership role for developing strategies and expanding partnerships in an international exhibition context. Overseeing a team and contributing to the growth of Fruit Logistica, a major global trade fair.
Senior Director, Strategy responsible for driving client acquisition and business development for pharmaceutical and biotech partners. Collaborating with Insights teams and leading sales strategies.
Director of Maintenance overseeing all maintenance operations at a healthcare facility. Responsible for safety, compliance, team management, and budget oversight.
Assistant Director overseeing Residential Education at WashU, focusing on leadership of Residential Community Directors. Ensuring vibrant community life and supporting resident engagement and development.
Directeur de Produits piloting product line strategies and managing technology requirements for avionic systems. Ensuring alignment with market needs and improving product roadmaps.
Associate Director/Senior Manager leading the execution of Manulife’s Asia strategy and overseeing project management initiatives across markets and functions.