Our client is a global enterprise currently deploying an Application Control capability to strengthen cyber security, improve software governance and reduce risk across its end-user and server environments.

We are seeking an Application Control Security Analyst to join the Security Governance team and support the day-to-day operation and ongoing maturity of the capability.

About the Role

In this role, you will be responsible for reviewing and managing application requests, assessing software security risk, maintaining application control rules and coordinating with technical teams to safely deploy approved applications.

You will work closely with Cyber Security, EUC, Server, Application Support, Packaging and other technology teams to ensure applications are appropriately assessed, approved and controlled within the enterprise environment.

Key Responsibilities

• Review, assess, approve or deny application requests in accordance with security and governance requirements.
• Assess software for security risk, vulnerabilities, vendor reputation, business need and licensing considerations.
• Create and maintain application allow, block and exception rules.
• Investigate blocked applications, failed installations and application compatibility issues.
• Coordinate with EUC, Server, Application Support, Application Packaging and Cyber Security teams to resolve application control issues.
• Manage exceptions and support remediation of unapproved, vulnerable or high-risk software.
• Maintain accurate records of application decisions, exceptions, approvals and control changes.
• Monitor and support the ongoing effectiveness of application control policies.
• Communicate application control decisions and outcomes clearly to technical teams and business stakeholders.
• Contribute to continuous improvement of application control processes, standards and governance.

About You

We are looking for someone with experience in one or more of the following areas:

• Cyber Security
• Application Control / Application Whitelisting
• Endpoint Security
• EUC / Desktop Engineering
• Application Support
• Application Packaging
• Windows or Server Engineering

You will also have:

• An understanding of application control, allowlisting or endpoint security technologies.
• Experience assessing software or security risk.
• Strong problem-solving, troubleshooting and investigation skills.
• Good understanding of Windows applications and software deployment.
• Strong stakeholder management and communication skills.
• The ability to explain technical security decisions clearly to both technical and business audiences.
• Strong attention to detail and documentation skills.
• The ability to work collaboratively across security and technology teams.
• Desirable Technical Experience