Enterprise Security Services Lead

We are looking for an Enterprise Security Services Lead to oversee and coordinate security across our enterprise infrastructure, applications, and third-party ecosystem. You will drive vulnerability management across servers, endpoints, networks, and applications, while ensuring our technology environment meets AutoStore security standards and follows security best practices.

The role also covers application and third-party security, working with internal teams and external service providers to strengthen secure development practices, manage security testing and remediation, and ensure suppliers and integrations meet our security requirements. This is a highly cross-functional role where you will coordinate security activities across multiple stakeholders and drive improvements in processes, tooling, and security maturity.

Job Responsibilities:

Enterprise Vulnerabilities

• Own and develop our enterprise vulnerability management capabilities, including vulnerability tooling, scanning, data integrations, reporting, and integration with SDLC, DevSecOps, and CI/CD processes.
• Work with Risk and technical teams to identify and prioritise vulnerabilities, define remediation plans, track key risk and performance indicators, and coordinate remediation across the organisation.

Third-Party Security & Supply Chain Security

• Lead third-party and supply chain security, including supplier risk assessments, security due diligence and continuous monitoring, as well as software supply chain practices such as SBOM governance and open-source risk management.

Penetration Testing & Red Team Services

• Lead penetration testing and Red Team activities, ensuring testing reflects business risks and relevant threats, and coordinate remediation and retesting of identified vulnerabilities.

Code Signing Services:

• Support code-signing services and governance, ensuring secure certificate and key management, software integrity, and trusted release processes across development teams.