Security & Compliance EPM, IT Governance & Planning
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
Job description
Weāre looking for someone who understands cloud computing at scale and can apply vulnerability management principles across the varied platforms. You will participate in the design and development of novel security automation integrations and reporting. You will partner with internal Compliance, Information Security, and engineering teams to create next-level reporting and tooling. You will also act as an organization-wide EPM on cross-team projects related to advancing our annual roadmap.ā,āresponsibilitiesā:āMonitor the vulnerability data intakes for triage and risk-based prioritization together with Information Security
Drive remediation and patching workflows within IS&T together with embedded security partners
Drive the optimization of process and tooling automation
Develop and maintain reporting, metrics and executive KPIās to assist with agile decision making
Manage the exception and compensating controls processes particularly on compliance related assets
Requirements
Do you have experience in Public Cloud?, Do you have a Masterās degree?, Exposure to and understanding of the Software Development Lifecycle (SDLC)
Possess technical empathy in order to engage and understand engineersā unique challenges.
Proficient with risk assessment and mitigation processes
Proven track record of defining and developing key performance metrics that drive tangible improvements
Outstanding written and verbal skills, with the ability to distill complex information for various audiences
Experience in cross-functional leadership is desired
Possess the capacity to think creatively to identify risks and drive execution across multiple teams
Masterās degree in computer science, security engineering, or technical project management
Minimum Qualifications
5+ years application security experience is a must
Certification in one or more cloud based computing platform (e.g., AWS Solutions Architect (Associate), Microsoft Azure Fundamentals (AZ-900), or Google Cloud Engineer)
Bachelorās degree in Computer Science, Security Engineering, or technical project management or related experience or relevant industry experience
Benefits & conditions
Pulled from the full job description
- Employee stock purchase plan
- Health insurance
- Retirement plan
- Dental insurance
- RSU, At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $134,800 and $245,800, and your base pay will depend on your skills, qualifications, experience, and location.
Apple employees also have the opportunity to become an Apple shareholder through participation in Appleās discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Appleās Employee Stock Purchase Plan. Youāll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on indeed.comGood distractions
Talks and stories from around this role ā technically off-topic, practically not.
Moments
Explore playlistsVideos
See allRelated articles
See all
7 Cloud Computing Trends Coming in 2025 for Developers
Best Paying Jobs in Technology
Top Must-Visit Developer Conferences in the US in 2026
Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.