Company – Our client is one of Canada’s leading financial cooperatives, serving a large and growing member base through innovative banking, lending, and digital financial solutions. Known for its commitment to community impact, technology modernization, and member-focused service, the organization offers the opportunity to influence security practices at scale within a highly regulated industry.

Job Title – Senior Application Security Specialist Location – Remote across Canada (aligned with PST business hours) Role Type – Direct Hire

Must Have Skills: Proven experience building, leading, and maturing an Application Security program Strong “shift-left” security mindset with the ability to embed security early in the SDLC and champion secure-by-design practices Exceptional executive communication and presentation skills, with the ability to influence senior leadership Demonstrated ability to collaborate closely with developers, engineers, and cross-functional technical teams Strong leadership experience driving security initiatives across multiple business units and stakeholder groups Nice to have: Experience within financial services or another highly regulated industry

Responsibilities and Job Details: Lead and evolve our esteemed client’s Application Security program, driving security maturity across the organization Partner with software engineering teams to integrate secure-by-design principles throughout the software development lifecycle Collaborate with developers and technical stakeholders to identify, assess, and remediate application security risks Establish and enhance application security testing practices, including automated and manual security assessments Drive vulnerability management initiatives and help prioritize remediation efforts across development teams Provide strategic guidance on cloud security, container security, and Kubernetes security best practices Support the development and governance of AI security controls and secure adoption of emerging technologies Present security strategies, risk findings, and program updates to executive leadership and business stakeholders Influence security standards, policies, and engineering practices across multiple business divisions Serve as a trusted advisor to both technical and non-technical stakeholders on application security matters Promote a culture of continuous improvement, accountability, and proactive risk management Work collaboratively across business and technology teams to operationalize security initiatives and strengthen organizational resilience