IAM & Data Protection Security Lead | Insider Risk

AutoStore AS; Oslo fylke; Sur place; NOK 900 000 - 1 500 000; Plein temps

Avantages offerts par ce poste

Health insurance

1 hour per week of paid exercise

Generous pension plan

Résumé du poste

AutoStore AS is hiring a Security Specialist – Identity, Data Protection & Insider Risk to strengthen access governance and data protection across our global organization. You will own IAM governance, enable structured access reviews, and improve privileged access security while collaborating with IT, Product, and HR.

The role emphasizes cross-functional governance, Zero Trust alignment, and implementing PR-related controls with a focus on protecting sensitive information and intellectual

Qualifications

• 10+ years in cybersecurity with 5+ years in IAM initiatives.
• Experience with Entra ID, Active Directory, SSO, MFA, and PAM.
• Knowledge of IGA and DLP, insider risk, and Zero Trust.
• Ability to manage enterprise-wide security initiatives and governance.
• Strong communication and stakeholder management.

Responsabilités

• Develop and maintain IAM governance and Joiner/Mover/Leaver processes.
• Coordinate periodic access reviews and certifications across critical apps.
• Strengthen authentication and privileged access security.
• Develop and improve data protection practices (DLP, data classification).
• Establish insider risk management processes with HR, Legal, IT.

Connaissances

IAM strategy

Identity governance

Zero Trust

Insider risk

Stakeholder communication

Security governance

Outils

Microsoft Entra ID

Active Directory

SSO

MFA

PAM

IGA

DLP

Description du poste

AutoStore AS is hiring a Security Specialist – Identity, Data Protection & Insider Risk to strengthen access governance and data protection across our global organization. You will own IAM governance, enable structured access reviews, and improve privileged access security while collaborating with IT, Product, and HR.

The role emphasizes cross-functional governance, Zero Trust alignment, and implementing PR-related controls with a focus on protecting sensitive information and intellectual