Hoppa till huvudinnehållet
Ultragroup logo

Senior Cybersecurity Specialist

Ultragroup
  • OrtGöteborg
  • OmfattningHeltid
  • Sista ansökan30 dagar kvar
  • Publicerad20 okt.

Om tjänsten

ABOUT THE ROLE

We are looking for a Senior Cybersecurity Specialist with a strong maritime industry background to take technical ownership of

Endpoint Vulnerability Management for a leading client in Gothenburg, Sweden.

This is a strategic and technical leadership role, not an operational patching position. You will be responsible for shaping

vulnerability management strategy, strengthening security architecture and governance, and developing scalable security

capabilities that measurably reduce cyber risk across a complex digital environment.

The ideal candidate combines broad cybersecurity expertise with strong hands-on knowledge of risk-based vulnerability management.

You understand how vulnerabilities, emerging threats and architectural weaknesses translate into business risk, and you can turn

that understanding into practical solutions, clear governance and measurable security improvements.

You will work closely with IT, infrastructure, application security, product management and business stakeholders to strengthen

the organization's overall security posture.

KEY RESPONSIBILITIES

RISK-BASED VULNERABILITY MANAGEMENT

Develop and improve risk-based vulnerability assessment and prioritization strategies.
Evaluate vulnerabilities based on threat intelligence, exploitability, asset criticality and business impact.
Define remediation priorities that reduce actual business risk, particularly for business-critical systems.

ENTERPRISE SECURITY COVERAGE

  • Establish comprehensive vulnerability visibility across on-premises infrastructure, end-user devices, cloud environments and

remote endpoints.

Address security requirements across Azure, AWS, GCP and relevant industrial or operational technology environments.
Identify coverage gaps and balance security priorities against available resources.

SECURITY ARCHITECTURE AND TECHNOLOGY STRATEGY

Lead the evaluation, selection, configuration and optimization of vulnerability management and endpoint security technologies.
Contribute to the development of an updated monitoring architecture and security technology stack.
Assess security products, suppliers, integrations and architectural dependencies.

ROOT CAUSE ANALYSIS AND CONTINUOUS IMPROVEMENT

Identify recurring vulnerabilities and systemic weaknesses in configurations, processes and architecture.
Drive long-term security improvements in collaboration with IT, infrastructure, application and engineering teams.
Improve the effectiveness and maturity of vulnerability management processes.

GOVERNANCE, RISK AND COMPLIANCE

Contribute to the development and maintenance of vulnerability management policies, standards and governance frameworks.
  • Align security practices with relevant frameworks, standards and regulations, including ISO 27001, NIST, CIS Controls and

ISA/IEC 62443 where applicable.

Ensure security risk decisions are documented, communicated and managed effectively.

SECURITY REPORTING AND STAKEHOLDER COMMUNICATION

Develop executive dashboards, KPIs and risk reports that provide clear visibility into the organization's security posture.
Translate technical vulnerabilities into understandable business risks and actionable recommendations.
Provide operational teams with detailed findings and practical remediation guidance.

THREAT AWARENESS AND PRODUCT DEVELOPMENT

Translate emerging threats and critical vulnerabilities into security guidance, playbooks and awareness activities.
Support security requirements for factory, industrial and OT environments where applicable.
  • Collaborate with Product Management on new security capabilities, proof-of-concept activities, feasibility assessments and

product improvements.

REQUIRED QUALIFICATIONS AND EXPERIENCE

Extensive professional experience in cybersecurity, information security, security architecture or security consulting.
Relevant professional experience within the maritime industry is mandatory.
  • Strong experience in vulnerability assessment and risk-based vulnerability management within large, complex enterprise

environments.

  • Broad understanding of cybersecurity domains, including threat analysis, identity and access management, security architecture,

incident response and governance.

  • Understanding of attacker techniques through penetration testing, security testing, threat analysis, such as TARA, or incident

response and forensics.

Practical knowledge of security frameworks such as ISO 27001, NIST, CIS Controls and ISA/IEC 62443.
  • Experience with endpoint security and vulnerability management platforms such as Qualys, Tenable or Microsoft Defender for

Endpoint.

Understanding of hybrid IT environments, segmented networks, cloud platforms such as Azure and AWS, and Zero Trust principles.
Experience developing security dashboards, KPIs and risk reporting for management and technical stakeholders.
Proven ability to act as a technical lead or subject matter expert, guide stakeholders and mentor colleagues.
Excellent English communication skills, with the ability to explain complex technical issues in business terms.
Ability and willingness to work in Gothenburg, Sweden.

PREFERRED QUALIFICATIONS

Experience in maritime cybersecurity, shipping, vessel systems, marine technology or related industrial environments.
Experience with manufacturing, industrial cybersecurity or Operational Technology (OT) security.
Relevant certifications such as CISSP, CISA, CISM, CRISC, OSCP, CEH or ISO 27001 Lead Implementer/Auditor.
Experience with SIEM, SOC operations or threat intelligence integration.
Knowledge of PKI, cryptography and application security.
Experience working in agile product development teams.
Scripting and automation skills using Python, PowerShell or similar technologies.
Understanding of patch management and remediation coordination.

WHAT WE ARE LOOKING FOR

We are looking for a proactive, analytical and business-oriented cybersecurity professional who can combine technical depth with

strategic thinking.

You should be comfortable taking ownership of complex security challenges, influencing technical and business stakeholders, and

driving improvements from strategy through implementation.

Most importantly, you must bring relevant maritime industry experience and be able to contribute to the client's cybersecurity

activities in Gothenburg.

LOCATION AND WORKING ARRANGEMENT

The role is based in Gothenburg, Sweden. Candidates must be able to work in Gothenburg under the agreed working arrangement.

Location: Gothenburg, Sweden

Experience: Senior-level

Industry: Maritime / Shipping / Industrial Technology

Focus: Cybersecurity, Vulnerability Management, Security Architecture and Governance