Senior Cybersecurity Specialist

About the Role

We are looking for a Senior Cybersecurity Specialist with a strong maritime industry background to take technical ownership of Endpoint Vulnerability Management for a leading client in Gothenburg, Sweden.

This is a strategic and technical leadership role, not an operational patching position. You will be responsible for shaping vulnerability management strategy, strengthening security architecture and governance, and developing scalable security capabilities that measurably reduce cyber risk across a complex digital environment.

The ideal candidate combines broad cybersecurity expertise with strong hands-on knowledge of risk-based vulnerability management. You understand how vulnerabilities, emerging threats and architectural weaknesses translate into business risk, and you can turn that understanding into practical solutions, clear governance and measurable security improvements.

You will work closely with IT, infrastructure, application security, product management and business stakeholders to strengthen the organization's overall security posture.

Key Responsibilities

Risk-Based Vulnerability Management

• Develop and improve risk-based vulnerability assessment and prioritization strategies.

• Evaluate vulnerabilities based on threat intelligence, exploitability, asset criticality and business impact.

• Define remediation priorities that reduce actual business risk, particularly for business-critical systems.

Enterprise Security Coverage

• Establish comprehensive vulnerability visibility across on-premises infrastructure, end-user devices, cloud environments and remote endpoints.

• Address security requirements across Azure, AWS, GCP and relevant industrial or operational technology environments.

• Identify coverage gaps and balance security priorities against available resources.

Security Architecture and Technology Strategy

• Lead the evaluation, selection, configuration and optimization of vulnerability management and endpoint security technologies.

• Contribute to the development of an updated monitoring architecture and security technology stack.

• Assess security products, suppliers, integrations and architectural dependencies.

Root Cause Analysis and Continuous Improvement

• Identify recurring vulnerabilities and systemic weaknesses in configurations, processes and architecture.

• Drive long-term security improvements in collaboration with IT, infrastructure, application and engineering teams.

• Improve the effectiveness and maturity of vulnerability management processes.

Governance, Risk and Compliance

• Contribute to the development and maintenance of vulnerability management policies, standards and governance frameworks.

• Align security practices with relevant frameworks, standards and regulations, including ISO 27001, NIST, CIS Controls and ISA/IEC 62443 where applicable.

• Ensure security risk decisions are documented, communicated and managed effectively.

Security Reporting and Stakeholder Communication

• Develop executive dashboards, KPIs and risk reports that provide clear visibility into the organization's security posture.

• Translate technical vulnerabilities into understandable business risks and actionable recommendations.

• Provide operational teams with detailed findings and practical remediation guidance.

Threat Awareness and Product Development

• Translate emerging threats and critical vulnerabilities into security guidance, playbooks and awareness activities.

• Support security requirements for factory, industrial and OT environments where applicable.

• Collaborate with Product Management on new security capabilities, proof-of-concept activities, feasibility assessments and product improvements.

Required Qualifications and Experience

• Extensive professional experience in cybersecurity, information security, security architecture or security consulting.

• Relevant professional experience within the maritime industry is mandatory.

• Strong experience in vulnerability assessment and risk-based vulnerability management within large, complex enterprise environments.

• Broad understanding of cybersecurity domains, including threat analysis, identity and access management, security architecture, incident response and governance.

• Understanding of attacker techniques through penetration testing, security testing, threat analysis, such as TARA, or incident response and forensics.

• Practical knowledge of security frameworks such as ISO 27001, NIST, CIS Controls and ISA/IEC 62443.

• Experience with endpoint security and vulnerability management platforms such as Qualys, Tenable or Microsoft Defender for Endpoint.

• Understanding of hybrid IT environments, segmented networks, cloud platforms such as Azure and AWS, and Zero Trust principles.

• Experience developing security dashboards, KPIs and risk reporting for management and technical stakeholders.

• Proven ability to act as a technical lead or subject matter expert, guide stakeholders and mentor colleagues.

• Excellent English communication skills, with the ability to explain complex technical issues in business terms.

• Ability and willingness to work in Gothenburg, Sweden.

Preferred Qualifications

• Experience in maritime cybersecurity, shipping, vessel systems, marine technology or related industrial environments.

• Experience with manufacturing, industrial cybersecurity or Operational Technology (OT) security.

• Relevant certifications such as CISSP, CISA, CISM, CRISC, OSCP, CEH or ISO 27001 Lead Implementer/Auditor.

• Experience with SIEM, SOC operations or threat intelligence integration.

• Knowledge of PKI, cryptography and application security.

• Experience working in agile product development teams.

• Scripting and automation skills using Python, PowerShell or similar technologies.

• Understanding of patch management and remediation coordination.

What We Are Looking For

We are looking for a proactive, analytical and business-oriented cybersecurity professional who can combine technical depth with strategic thinking.

You should be comfortable taking ownership of complex security challenges, influencing technical and business stakeholders, and driving improvements from strategy through implementation.

Most importantly, you must bring relevant maritime industry experience and be able to contribute to the client's cybersecurity activities in Gothenburg.

Location and Working Arrangement

The role is based in Gothenburg, Sweden. Candidates must be able to work in Gothenburg under the agreed working arrangement.

Location: Gothenburg, Sweden
Experience: Senior-level
Industry: Maritime / Shipping / Industrial Technology
Focus: Cybersecurity, Vulnerability Management, Security Architecture and Governance