Vulnerability Management Lead – Security Governance

Statkraft Varme AS; Oslo fylke; Hybrid; NOK 900,000 - 1,400,000; Full time

Benefits offered by this job

Unlimited learning

Global network

Pride in work

Flexible working

Competitive terms

Job summary

Statkraft is seeking a Vulnerability Manager to own the end-to-end vulnerability management lifecycle across the organization. The role focuses on governance, standardization, SLA enforcement, and driving continuous improvement of defenses across multiple countries.

You will lead a skilled cybersecurity team, collaborating with IT and development to prioritize actions and improve risk posture while maintaining momentum and accountability.

Qualifications

• Bachelor’s or Master’s degree in IT, Information Security, Computer Science, or related field
• Minimum of 5 years of experience within cyber security, information security, IT operations, or technical vulnerability management
• Strong project management capabilities with experience driving initiatives across matrixed, cross-functional technical teams without direct authority
• Solid understanding of vulnerability lifecycles, threat modeling, and how vulnerabilities impact cloud infrastructure and enterprise networks
• Knowledge and experience with industry-standard vulnerability scanners and platforms such as Tenable/Nessus, Qualys, Rapid7, or Microsoft Defender Vulnerability Management
• Fluency in Norwegian and English, both spoken and written

Responsibilities

• Advance and mature the vulnerability management framework, policies, and SOPs
• Establish and revise how vulnerabilities are evaluated and prioritized using threat intel and business context
• Monitor and enforce vulnerability compliance across Security, Operations, Development and other departments
• Design and track KPIs, risk indicators, dashboards to report security posture and residual risk
• Lead regular meetings with system owners and business units to align remediation efforts
• Oversee the tooling strategy for the vulnerability management platform and vendors

Skills

Cyber security

Project management

Threat modeling

Vulnerability management

Stakeholder management

Cloud security (Azure/AWS/GCP)

Security governance

Communication (EN/NO)

Education

Bachelor’s/Master’s in IT or related

Tools

Tenable/Nessus

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Job description

Statkraft is seeking a Vulnerability Manager to own the end-to-end vulnerability management lifecycle across the organization. The role focuses on governance, standardization, SLA enforcement, and driving continuous improvement of defenses across multiple countries.

You will lead a skilled cybersecurity team, collaborating with IT and development to prioritize actions and improve risk posture while maintaining momentum and accountability.