Senior Cyber Security Specialist

For our client, a global industrial and transport-solutions group developing commercial vehicles, construction equipment, marine and industrial power solutions, as well as connected services, we are looking for a senior cybersecurity professional to take technical ownership of Endpoint Vulnerability Management.

Operating across large-scale engineering, manufacturing, IT and OT environments, the organisation is strengthening its ability to identify, prioritise and reduce cyber risk across a complex global digital ecosystem. This includes enterprise endpoints, cloud platforms, on-premise infrastructure, connected products and factory environments. The client operates in nearly 180 markets and employs approximately 99,000 people, reflecting the scale and diversity of the technology landscape this role will help protect.

Key responsibilities

• Define and evolve a risk-based vulnerability management framework, using threat intelligence, exploitability, asset criticality and business impact to prioritise remediation.
• Ensure vulnerability visibility and risk-based prioritisation across endpoints, on-premise infrastructure, cloud platforms, remote devices and manufacturing or OT environments.
• Own the vulnerability management technology stack, including tool selection, architecture, configuration, integrations and optimisation of solutions such as Qualys, Tenable or Microsoft Defender for Endpoint.
• Lead the transition to an updated monitoring architecture and assess new technologies and suppliers from a cybersecurity perspective.
• Identify root causes in configurations, processes and architecture, then drive sustainable improvements with IT, infrastructure and application teams.
• Develop vulnerability-management governance, executive reporting, dashboards and KPIs, and communicate risk-based recommendations to senior stakeholders and operational teams.

Ideal candidate profile

• Extensive experience in cybersecurity as a Security Engineer, Security Architect, Information Security Officer or Security Consultant.
• Strong hands-on experience in vulnerability assessment and risk-based vulnerability management within large enterprise environments.
• Attacker-perspective experience gained through penetration testing, security testing, threat analysis and risk assessment, incident response or digital forensics.
• Practical knowledge of ISO 27001, CIS Controls, NIST and ISA/IEC 62443.
• Experience with Qualys, Tenable or Microsoft Defender for Endpoint, including architecture, integration and optimisation.
• Strong understanding of hybrid IT environments, segmented on-premise networks, Azure, AWS, identity security and Zero Trust principles.
• Excellent English communication skills and the ability to explain complex cyber risks in clear business terms.

Nice to have

• Certifications such as CISSP, CISA, CISM, CRISC, OSCP, CEH or ISO 27001 Lead Implementer/Auditor.
• Experience integrating vulnerability-management capabilities with SIEM, SOC or threat-intelligence services.
• Knowledge of PKI, cryptography or application security.
• Python or PowerShell scripting and automation experience.
• Knowledge of patch management and remediation coordination.

Conditions

• Location: Göteborg
• Work model: Hybrid, with 50% remote work.
• Assignment period: 12 October 2026 to 30 June 2027, with the possibility of extension.
• Cooperation model: B2B, with a rate of 800–900 SEK per hour, or Regular Employment, with a salary of up to 80,000 SEK gross per month.