Global A&D Vulnerability Management Expert

Job Summary

We are now hiring a Global Automation & Digital Cybersecurity Vulnerability Expert.

In this role, you will help secure the future of food and beverage delivery for our customers while serving as a key authority in collaboration with our strategic suppliers.

The Cybersecurity Vulnerability Expert is responsible for coordinating the identification, assessment, triage, prioritization, tracking and remediation of cybersecurity vulnerabilities affecting products, solutions, software, infrastructure and Industrial Automation Control Systems (IACS). The role serves as a central point of coordination between engineering, product teams, cybersecurity specialists, suppliers and operational stakeholders to reduce cybersecurity risk and ensure timely mitigation.

This is a senior, high-impact role with global reach, where you will act as a technical authority and trusted advisor across Tetra Pak. Success in this role will depend on your ability to coordinate, drive and communicate effectively with stakeholders across functions and at different levels of seniority.

The position is permanent and preferably based in Lund, Sweden, although other Tetra Pak locations within the European time zone may be considered. Some travel, approximately 10%, is expected to support our global organisation.

What you will do

• Monitor and track emerging vulnerabilities from Threat Intelligence and QuTI-P. Receivesecurity events from ISIRT.

• Receive escalated vulnerability alerts from products and solutions teams.
• Perform central triage & assess vulnerability reporting obligations.
• Normalize & Correlate vulnerabilities across products.
• Coordinate with the product security point of contact (SPOC).
• Collaborate with Product Teams to prepare notifications for authorities.
• Report actively exploited vulnerabilities & security incidents to ENISA.
• Notify customers about vulnerabilities & security incidents.
• Coordinate with external communications teams on vulnerability-related messaging.
• Archive and document all relevant artifacts.
• Own vulnerability coordination & vulnerability intake process.
• Continuously monitor ENISA/CRA reporting requirements and implement or highlight any applicable updates.

• Refine and optimize information sources to ensure relevant vulnerability alerts are received.

We believe you have

You are an experienced senior professional with a strong strategic mindset and the ability to create momentum in complex, global environments. You combine strong stakeholder management and clear communication with a practical, hands-on approach, and you build trust naturally across teams, functions, and stakeholders. You stay close to external developments and maintain a continuous focus on effective and efficient ways of working.

You have the experience and confidence to move the cybersecurity agenda forward within Automation and Digital, and you are motivated by contributing to an efficient, high-quality, and forward-looking automation organisation.

Key skills and experience

• 5–10 years of proven experience within OT Cybersecurity
• Documented expertise in Vulnerability Management
• Solid understanding of legislation and regulations such as NIS2, CRA and NIST
• Certification in IEC 62443 is an advantage
• Experience working in a global organization is highly valued
• Relevant university degree
• Full professional fluency in English
• Additional language skills are an advantage