Enterprise Security Lead: Vulnerability & Third-Party Risk

AutoStore AS; Oslo; On-site; NOK 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Health insurance

Pension plan

Flexible work options

Career opportunities

Structured onboarding

Job summary

AutoStore AS seeks an experienced Enterprise Security Services Lead to coordinate security across enterprise infrastructure, apps, and third-party ecosystem. You will drive vulnerability management across servers, endpoints, networks, and applications, ensuring compliance with AutoStore security standards.

The role covers application and third-party security, working with internal teams and external providers to strengthen secure development, manage testing and remediation, and ensure suppliers

Qualifications

• 10+ years of cybersecurity experience, including 5+ years in senior/app security leadership.
• Strong background in enterprise vulnerability management and security assurance.
• Hands-on in DevSecOps and secure software development within CI/CD environments.
• Familiarity with OWASP, NIST, SAST/DAST/SCA, API and cloud security.
• Experience with cloud environments (Azure, AWS, GCP) and security certifications a plus.

Responsibilities

• Own and develop enterprise vulnerability management capabilities and tooling.
• Identify and remediate vulnerabilities with risk-based prioritisation across orgs.
• Lead third-party and supply chain security including SBOM governance.
• Oversee penetration testing and Red Team activities with remediation cycles.
• Support code signing governance and secure release processes across teams.

Skills

Enterprise security leadership

Vulnerability management

Application security

CI/CD DevSecOps

Cloud security

Tools

CI/CD tooling

SAST/DAST/SCA tools

PKI/code signing

Job description

AutoStore AS seeks an experienced Enterprise Security Services Lead to coordinate security across enterprise infrastructure, apps, and third-party ecosystem. You will drive vulnerability management across servers, endpoints, networks, and applications, ensuring compliance with AutoStore security standards.

The role covers application and third-party security, working with internal teams and external providers to strengthen secure development, manage testing and remediation, and ensure suppliers