- The Divisional Security Lead (DSL) for CP&ESG; is a senior Application Security SME embedded within the App Sec CoE and the CP&ESG; divisional CTO team. This role is responsible for ensuring that App Sec policies, standards, and best practices are consistently applied across all CP&ESG; development teams, and for guiding and aligning Portfolio Security Leads (PSLs) and Security Champions within the division.
The DSL acts as the central point of contact for application security strategy, training, and governance in CP&ESG;, and is empowered to drive divisional App Sec initiatives, provide expert guidance, and escalate security issues. The DSL operates with autonomy and seniority, reporting administratively to the Director of App Sec CoE and functionally to the CP&ESG; CTO.
The App Sec CoE is a centralized, cross-functional team that provides standardized tools, SOPs, and expert guidance for security-by-design development. It supports a federated model with a central team and a virtual network of Security Champions and Leads, collaborating with other Centers of Excellence and CTC teams to deliver secure, compliant, and innovative solutions.
The DSL role is responsible for aligning Application Security practices in the CP&ESG; division with Application Security CoE roadmap, best practices and initiatives to establish consistency across DXG organization.
Essential Duties and Responsibilities:
- Guide, mentor, and align Portfolio Security Leads (PSLs) and Security Champions in the CP&ESG; division, ensuring App Sec policies and standards are upheld.
- Serve as the primary App Sec SME for CP&ESG;, providing expert guidance, incident support, and escalation for security issues.
- Ensure continuous threat modeling, scanning,



regular security reviews, and timely vulnerability remediation across CP&ESG; portfolios.
- Oversee training activities as part of mentoring PSLs and Security Champions and ensure PSLs and Champions are enabled and empowered.
- Provide quarterly App Sec briefings to the CP&ESG; CTO and prepare monthly App Sec reports.
- Collaborate with Cybersecurity Technology Controls (CTC) to support NIST attestation, incident management and exception filing.
- Collaborate with the Dev SecOps CoE in driving integration of security controls in CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC checks) to track provenance and protect the integrity of software.
- Validate and enforce ASVS-based security requirements across CP&ESG; services and applications.
- Nominate, assess, and guide PSLs and Security Champions; provide fallback if PSLs/Champions are unavailable.
- Collaborate with product managers, architects, Privacy Champions, and other CoEs to balance security and privacy requirements.
- Participate in and drive certain App Sec CoE strategic programs, including App Sec Metrics & Resources, App Sec Tools Deployment, ASVS Gap Assessment & Remediation, and SBOM/Supply Chain Management.
- Contribute to the App Sec CoE’s mission and align with its goals to equip teams with standards, tools,



and training to identify and fix security issues early and efficiently.
Job Qualifications:
- Bachelor’s degree.
- GIAC GSEC, CISSP, or an equivalent baseline certification and one vendor-neutral Secure SDLC/App Sec certification (e.g., CSSLP) (preferred).
- 12+ years of experience in application/product security, software engineering, or related roles.
- Demonstrated success leading cross-functional security initiatives and improving operational workflows.
- In case of an internal candidate, familiarity with Wolters Kluwer security policies and standards is required, and familiarity with CP&ESG; products is preferred.
- Experience managing or indirectly influencing others in a matrixed or project-based environment.
- Proficiency in one or more modern programming languages (Java, Python, C#, Java Script).
- Hands-on experience with security testing tools (SAST, SCA, DAST, IaC scanning, container/runtime scanning).
- Experience embedding security checks in CI/CD (Git Hub Actions, Git Lab CI, Jenkins, Azure Dev Ops, Bitbucket etc.).
- Understanding of security facilities and capabilities in at least one major cloud provider (AWS, Azure, GCP).
- Solid business acumen with understanding of secure product strategy.
- Ability to translate strategic direction into actionable operational execution.
- Highly organized with strong attention to detail and process discipline.
- Effective communicator, able to influence across functions and seniority levels.
- Demonstrated ability to manage competing priorities in a fast-paced, matrixed environment.
- Change-oriented mindset with a continuous improvement focus.
.

Our Interview Practices

📌 Divisional Security Lead - CP&ESG (12+yrs exp in App Security + Leadership Exp) (India)
🏢 Wolters Kluwer (India) Private Limited - DXG
📍 India