Remote Enterprise Security Lead: Vulnerability & Risk Champion

AutoStore™; Stavanger; On-site; NOK 1,000,000 - 1,600,000; Full time

Benefits offered by this job

Collaborative culture

Work-life balance

Career growth opportunities

Structured onboarding

Job summary

AutoStore is seeking an Enterprise Security Services Lead to coordinate security across our infrastructure, applications, and third‑party ecosystem. You will drive vulnerability management across servers, endpoints, networks, and applications, ensuring AutoStore security standards and best practices are met.

The role also covers application and third‑party security, strengthening secure development practices and coordinating security testing and remediation.

Qualifications

• 10+ years in cybersecurity with senior/leadership experience in app security, vulnerability management or security assurance.
• Strong track record in enterprise vulnerability management and application security, including pen testing and third‑party security.
• Hands‑on experience implementing DevSecOps and secure software development practices in CI/CD environments.
• Solid understanding of security frameworks and testing methodologies (OWASP, NIST, SAST/DAST/SCA, API and cloud security, software supply chain, PKI/code signing).
• Experience with cloud environments like Azure, AWS or GCP; relevant certifications (CISSP, CSSLP, OSCP, GIAC) are a plus.

Responsibilities

• Own and develop enterprise vulnerability management capabilities, including tooling, scanning, data integrations, reporting, and SDLC/DevSecOps/CI‑CD integration.
• Coordinate remediation across the organisation by defining plans and tracking risk and performance indicators.
• Lead third‑party and supply chain security, including supplier risk assessments and SBOM governance.
• Lead penetration testing and Red Team activities, coordinate remediation and retesting of findings.
• Support code‑signing services and governance for secure certificate and key management across development teams.

Skills

Security leadership

Vulnerability management

DevSecOps

Cloud security

OWASP/NIST

CI/CD

Tools

SAST/DAST tools

SBOM governance

Job description

AutoStore is seeking an Enterprise Security Services Lead to coordinate security across our infrastructure, applications, and third‑party ecosystem. You will drive vulnerability management across servers, endpoints, networks, and applications, ensuring AutoStore security standards and best practices are met.

The role also covers application and third‑party security, strengthening secure development practices and coordinating security testing and remediation.