SENIOR APPLICATION SECURITY SPECIALIST | STAKEHOLDER MANAGEMENT | APPLICATION SECURITY LEADERSHIP

We are looking for an experienced Application Security Specialist to lead on content and set the standard for application security across our banking estate. You will be the go-to expert for security assessments, threat modelling, and vendor contract reviews, while coaching your team and influencing senior stakeholders. This role combines deep technical expertise with strong stakeholder management and an opportunity to work on emerging topics like AI and API security.

As Senior Application Security Specialist, you will:

• Lead security assessments, threat modelling, and capture risk opinions across more than 3000 applications (on-prem, cloud, and SaaS).
• Perform security reviews for vendor contracts (SaaS, COTS), balancing technical and organizational mitigating measures.
• Identify application security themes across the bank, push for continuous improvement, and help shape secure approaches for new topics (e.g. AI, APIs).
• Translate complex security issues into clear, actionable recommendations for senior stakeholders and project teams.
• Act as a CISO-level partner in projects, without direct people management responsibilities.
• 10+ years in IT Security or Application Security
• Experience with security reviews on vendor contracts
• Degree in Information Science or related field
• Professional certifications (CISSP, CCSP, CISA, CISM, CEH, CCSK)
• Knowledge of secure SDLC, security by design, and large-scale application security
• Experience with IS documentation, reporting, and consulting
• Strong stakeholder management skills – sharp questioning, clear explanations
• Strong communicator, able to translate technical jargon for diverse audiences
• Dutch is a plus