Job Description

As the Information Security Officer – Application Security, you are responsible for defining, governing, and overseeing application security across the organization. You ensure that application security risks are properly identified, assessed, and managed throughout the software development lifecycle.

You combine strong technical application security expertise with risk-based decision making and stakeholder communication, enabling the organization to balance security, delivery speed, and business objectives.

Responsibilities:

· Own and manage application security risks across the organization.

· Define and maintain application security policies, standards, and controls.

· Oversee and govern the use of SAST, DAST, and dependency scanning tools (e.g. Checkmarx).

· Assess vulnerabilities in applications and third-party libraries by determining exploitability, impact, and business risk.

· Decide on risk treatment options, including mitigation, acceptance, or escalation.

· Provide expert guidance to development and DevOps teams on secure design and remediation strategies.

· Validate critical vulnerabilities through technical analysis or targeted testing where required.

· Integrate application security requirements into the secure SDLC and CI/CD pipelines.

· Report application security posture, trends, and key risks to senior security leadership.

· Support audits, compliance activities, and security assessments related to application security.

Requirements:

· Strong background in Application Security or Offensive Security.

· Experience with application security tooling such as Checkmarx, DAST solutions, and container security platforms.

· Ability to translate technical vulnerabilities into clear risk statements.

· Solid understanding of modern application architectures and common attack vectors.

· Experience working within information security governance and risk management frameworks.

· Excellent communication skills and the ability to influence engineering teams.

We are looking forward to an introduction call and starting a process with you and one of the most unique financial service companies there is in the Netherlands.