Security Specialist – Identity, Data Protection & Insider Risk

AutoStore AS; Oslo fylke; On-site; NOK 1,100,000 - 1,500,000; Full time

Benefits offered by this job

Health insurance

Pension plan

Paid exercise 1 hour/week

Onboarding plan

Career opportunities

Collaborative culture

Job summary

AutoStore AS is hiring a Security Specialist – Identity, Data Protection & Insider Risk to strengthen how we manage identities, protect sensitive information, and mitigate security risks globally. You will own security policies, standards, and processes, ensuring proper access to systems and data, and collaborate with IT and application owners to implement structured reviews and robust identity governance.

The role emphasizes privilege access management, data protection, insider risk, and

Qualifications

• 10+ years of cybersecurity experience with IAM governance or programs.
• Experience with IAM technologies including IGA, Microsoft Entra ID, AD, SSO, MFA, and PAM.
• Knowledge of data protection, DLP, insider risk management, and Zero Trust principles.
• Experience implementing governance frameworks across teams and coordinating initiatives.
• Experience working in global environments with IT, Audit, Legal, Privacy, Compliance, HR, and external providers.
• Certifications such as CISSP, CISM, CCSP or relevant Microsoft security certs are advantageous.

Responsibilities

• Develop and maintain IAM governance with policies, standards, and controls including JML processes.
• Coordinate periodic access reviews and certifications with application owners.
• Strengthen authentication and privileged access security (MFA, SSO, PAM).
• Develop and improve data protection practices (classification, DLP).
• Establish insider risk management processes with HR, Legal, IT, and stakeholders.
• Protect critical applications and assets with risk-based access controls and audits.

Skills

IAM governance

Access reviews

PAM

MFA

SSO

Zero Trust

Data protection

Insider risk

Stakeholder management

Tools

Microsoft Entra ID

Active Directory

SSO

PAM tools

Job description

We are hiring a Security Specialist – Identity, Data Protection & Insider Risk to help strengthen how AutoStore manages identities, protects sensitive information, and mitigates security risks across our global organisation. In this role, you will take ownership of developing and improving security policies, standards, and processes, ensuring appropriate access to systems and data. You will work closely with IT, application owners, and other stakeholders to introduce structured access reviews, strengthen identity governance, and improve privileged access management. This is an opportunity to shape and develop key security practices, combining technical understanding with governance, stakeholder collaboration, and continuous improvement.

Key Responsibilities:

• Develop and maintain Identity & Access Management (IAM) governance, establishing policies, standards, and controls for user identities, access permissions, and Joiner, Mover, Leaver (JML) processes.
• Establish and coordinate periodic access reviews and certifications across critical business applications, working with application owners to validate permissions, address excessive access, and ensure appropriate segregation of duties.
• Strengthen authentication and privileged access security, overseeing MFA, Single Sign-On (SSO), privileged account controls, and improvements to identity security across the organisation.
• Develop and improve data protection practices, including data classification, Data Loss Prevention (DLP), and controls to safeguard confidential information and intellectual property.
• Establish and enhance insider risk management processes, collaborating with HR, Legal, IT, and other stakeholders to identify risks, coordinate investigations, and implement preventive measures.
• Protect critical applications and sensitive business assets, working with R&D, Product, and Engineering teams to define risk-based access controls, monitor potential threats, and support compliance and audit requirements.

Requirements:

• 10+ years of experience in cybersecurity, including at least 5 years working with Identity & Access Management (IAM) initiatives, governance, or programs.
• Experience with identity and access security technologies, including Identity Governance & Administration (IGA), Microsoft Entra ID, Active Directory, SSO, MFA, and Privileged Access Management (PAM).
• Knowledge of data protection and security practices, including Data Loss Prevention (DLP), insider risk management, and Zero Trust principles.
• Experience managing enterprise-wide security initiatives, establishing governance frameworks, improving processes, and coordinating implementation across different teams.
• Experience working in global environments, collaborating with IT, Audit, Legal, Privacy, Compliance, HR, and external service providers.
• Good communication and stakeholder management skills, with the ability to translate technical security requirements into practical processes and controls.
• Certifications such as CISSP, CISM, CCSP, or relevant Microsoft security certifications are an advantage.

We offer:

• A Collaborative & Inclusive Culture where we celebrate and value everyone’s contributions, encouraging diverse perspectives in decision-making.
• Work-Life Balance & Well-being: We offer 1 hour per week of paid exercise, health insurance, and a generous pension plan, prioritizing your mental and physical well-being.
• A Creative and Safe Workplace by joining a company experiencing rapid growth, with the stability of being Norway’s first unicorn listed on the Oslo Stock Exchange.
• International and Supportive Environment within a Norwegian multinational that values collaboration and innovation with a structured onboarding plan and career opportunities within the company

Location for this role is in our offices in Lysaker (Oslo) Stavanger, or our headquarters in Nedre Vats (Norway's west coast).

Application deadline: November 22nd.

All inquiries are treated confidentially.

AutoStore does not accept agency resumes or assistance for this role. Please do not forward resumes to our job's alias or AutoStore employees. AutoStore is not responsible for any fees related to unsolicited resumes. This policy should be respected.

We believe that following a defined and structured recruitment process will ensure that we have a fair and equal process for all candidates. We focus on finding the right talent and have designed our process to reduce biases and have a good candidate experience. For that reason, we are not accepting open applications, but encourage you to set up a job alert on our recruitment page to be notified when the next opportunity arises within your field of interest.

AutoStore, founded 1996, is a warehouse robot technology company that invented and continues to pioneer cube storage automation, the densest order‑fulfillment solution in existence. Our focus is to marry software and hardware with human abilities to create the future of warehousing. We are a value driven organization, with our people being our most important asset. Lean, Bold, and Transparent manifest itself in everything we do, and are pushing borders to increase efficiency, safety and develop new products for our customers. AutoStore was born out of the great idea for storing goods like Rubik’s Cube, instead of Dominos. We are now looking for talent that share our values and curiousity for new technology and development.