Application and Data Security Manager - Hybrid - Quaker Houghton

Company Overview:

At Quaker Houghton, we are experts in the development, production and application of chemical specialties, process fluids, lubricants and coatings for the manufacturing industry. We have been an integral part in the growth of the world’s largest industrial companies and to this day our experience and expertise show in the actions and dedication of our Associates worldwide. Today, we have a global presence, with our corporate headquarters located in Conshohocken, PA. Quaker Houghton is a global publicly traded company with a unique collaborative culture that supports career growth for its associates and offers competitive compensation and benefit programs.

Summary:

The Application & Data Security Lead is responsible for planning, designing, implementing and running of Quaker Houghton’s application and data protection program, ensuring it is aligned with the organization’s overall security posture goals and business objectives.

Reporting directly to the global Head of Information Security as a member of the Security Leadership Team, this role provides an opportunity to build out foundational capabilities and demands a deep understanding of security principles and practices as they relate to protecting sensitive information and ensuring the integrity of software applications.

Working closely with various teams such as Legal, Infrastructure and Development, this leader ensures that Application & Data policies and systems effectively support the organization’s security, compliance, and operational needs, including the technology, architecture, processes and procedures.

Job Responsibilities/Activities:

• Application & Data Protection: Implement and oversee data and application security measures to protect against unauthorized access, modification, or destruction.
• Application Vulnerability Management: Identify, assess, and remediate vulnerabilities within the application landscape, ensuring continuous protection against threats.
• Security Configuration Management: Maintain secure configuration standards for applications and platforms, including regular reviews and updates to security policies.
• Platform Security: Ensure that all organizational platforms (cloud and on-prem) are secured against known and emerging security threats.
• Data Security: Develop and enforce policies and procedures to secure corporate data across all systems and platforms including row and column level security, data encryption, masking and data classification to establish and safeguard confidentiality, integrity and availability of Quaker Houghton's data..
• Application Security: Lead security efforts throughout the application development lifecycle, from initial design through deployment and operational maintenance including being a key part of the software development lifecycle and leading code reviews and application vulnerability assessments.
• New Product Reviews: Conduct security assessments of new products and applications, providing recommendations for security enhancements before production release.

Subject Matter Expert:

• Identify, evaluate, and report business and technology risks related to data and application security including application and website Pen testing.
• Partner with other IT teams to implement measures to mitigate those risks.
• Fosters an understanding of the need for and application of the Secure Software Development Lifecycle and Data Security Management
• Ensure Application and Data Security processes are aligned across the organization
• Develop document standards for organizational use, along with measure adherence and exceptions.

EHS Responsibilities:

• The employee must occasionally lift and/or move up to 10 pounds.
• While performing the duties of this Job, the employee is regularly required to sit.
• The employee is frequently required to talk or hear.
• The employee is occasionally required to stand; walk; use hands to finger, handle, or feel and reach with hands and arms.
• Maintain the Highest EHS standards.

Education and Experience:

• Bachelor’s degree in Computer Science, Information Systems, Engineering or equivalent experience in a relevant field.
• Certified in one or more of the following: CRISC, CISA, CISM, CISSP, SANS GIAC Security Certifications, ITIL, ISO27001
• 10 years of relevant work experience in the IT industry with 5+ years of expertise in Application and Data Security
• 3+ years of experience leading technical teams.

Skills:

• Expert knowledge of application security principles, frameworks, and technologies
• Experience with vulnerability management tools and practices
• Extensive experience assessing data security risks and developing appropriate mitigations.
• Strong understanding of data protection laws and regulations
• Extensive experience performing security code reviews for audited applications and embedding security into Software Development lifecycle and DevSecOps practices.
• Proficiency in security architectures, cloud computing security, and compliance frameworks
• Excellent analytical and problem solving skills
• Strong communication, collaboration and stakeholder engagement skills
• Ability to thrive in a demanding and dynamic environment where you can shape and build the future

What's in it for you:

• Hybrid working
• Competitive pay programs with excellent career growth trajectory
• Opportunities to see your efforts contribute toward the success of the business
• Work for a global leader in the industrial process fluids industry
• On-site Fitness Center and Cafeteria

Quaker Houghton is an equal opportunity employer committed to creating a diverse workforce. Quaker Houghton provides equal employment opportunity for all qualified candidates. Quaker Houghton does not discriminate against any candidate for employment based on race, color, religion, sex, gender, gender identity or expression, affectional or sexual orientation, pregnancy, age, creed, ancestry, national origin, citizenship, marital or domestic partnership or civil union status, veteran’s status, physical/mental disability, genetic information, or any other category protected by U.S federal, state, and/or local employment law. Furthermore, Quaker Houghton is committed to providing reasonable accommodations to qualified candidates with physical and/or mental disabilities. Applicants with a disability who need assistance applying for a position may emailOneHR@quakerhoughton.com.