Enterprise Security Lead: Vulnerability & Third-Party Risk

AutoStore™; Oslo; Hybrid; NOK 1,000,000 - 1,500,000; Full time

Job summary

AutoStore is seeking an Enterprise Security Services Lead to oversee and coordinate security across enterprise infrastructure, applications, and third-party ecosystems. You will drive vulnerability management across servers, endpoints, networks, and applications, while ensuring our environment meets AutoStore security standards and best practices.

You will coordinate security activities across multiple stakeholders, drive improvements in processes, tooling, and security maturity, and lead

Qualifications

• 10+ years in cybersecurity; 5+ years in senior/app-sec/vulnerability management or security assurance.
• Strong experience with enterprise vulnerability management and application security, incl. pen testing and supplier security.
• Hands-on DevSecOps and secure SDLC practices; CI/CD integration.
• Knowledge of OWASP, NIST, SAST/DAST/SCA, API/cloud security, software supply chain, PKI/code signing.
• Experience with Azure/AWS/GCP; CISSP/CSSLP/OSCP/GIAC certifications advantageous.

Responsibilities

• Own and develop enterprise vulnerability management capabilities, tooling, scanning, and reporting integrated with SDLC/DevSecOps/CI/CD.
• Identify and prioritise vulnerabilities, define remediation plans, track risk metrics, and coordinate remediation.
• Lead third-party and supply chain security, including supplier risk assessments and SBOM governance.
• Lead penetration testing and Red Team activities, coordinate remediation and retesting of vulnerabilities.
• Support code-signing services and governance for secure certificate and key management.

Skills

Vulnerability management

Application security

Penetration testing

DevSecOps

CI/CD security

Cloud security

Security frameworks

Open-source risk

SBOM governance

Job description

AutoStore is seeking an Enterprise Security Services Lead to oversee and coordinate security across enterprise infrastructure, applications, and third-party ecosystems. You will drive vulnerability management across servers, endpoints, networks, and applications, while ensuring our environment meets AutoStore security standards and best practices.

You will coordinate security activities across multiple stakeholders, drive improvements in processes, tooling, and security maturity, and lead