Vulnerability Manager

Talenza; City of Melbourne; On-site; AUD 140,000 - 160,000; Full time

Job summary

Talenza is seeking an experienced Vulnerability Manager in Melbourne, Australia to lead and mature enterprise vulnerability management. You will own the vulnerability management lifecycle, applying a risk-based approach aligned with critical frameworks.

This role requires a hands-on cyber security professional, with a strong track record in vulnerability management and stakeholder engagement to drive meaningful security outcomes.

Qualifications

• 8+ years experience in cyber security with vulnerability management expertise.
• Hands-on experience with vulnerability tools including Qualys, CrowdStrike, and Microsoft Defender.
• Strong knowledge of ASD Essential Eight.

Responsibilities

• Lead enterprise vulnerability management strategy and execution.
• Drive remediation programs and patch governance.
• Develop executive reporting and dashboards.

Skills

Vulnerability Management

Stakeholder Engagement

Cyber Security Expertise

Education

Relevant Cyber Security Certifications (CISSP, CEH, Security+)

Tools

Qualys

CrowdStrike

Microsoft Defender

Job description

Exclusive with Talenza. An exciting opportunity exists for an experienced Vulnerability Manager to lead and mature enterprise vulnerability management capabilities within a large, complex, and highly regulated environment. This role is ideal for a hands‑on cyber security professional who can combine technical expertise with strong stakeholder engagement to drive measurable risk reduction across enterprise IT and cloud environments. You'll own the end‑to‑end vulnerability management lifecycle, embedding a risk‑based and intelligence‑led approach to remediation while aligning with frameworks including Essential Eight, ISO 27001, and critical infrastructure obligations.

Key Responsibilities

• Lead enterprise vulnerability management strategy, execution, and continuous improvement
• Optimise and enhance vulnerability tooling including Qualys, CrowdStrike, and Microsoft Defender
• Drive remediation programs and patch governance aligned to ASD Essential Eight Maturity Level 2+
• Define risk‑based remediation workflows and prioritisation models
• Establish remediation SLAs and drive accountability across technical teams
• Partner with infrastructure, cloud, and application teams to reduce cyber risk
• Develop executive reporting, dashboards, and vulnerability risk metrics
• Integrate vulnerability management into DevOps and operational processes
• Support audit and compliance activities across cyber security frameworks and regulatory obligations
• Leverage threat intelligence to prioritise emerging vulnerabilities and exposures

What Success Looks Like

• Reduction in aged critical vulnerabilities
• Improved patch compliance and remediation outcomes
• Mature governance and reporting frameworks embedded across the organisation
• Automated vulnerability reporting and executive visibility established
• Enhanced risk‑based decision making across security and technology teams

About You

You are a hands‑on cyber security professional with deep vulnerability management experience and the ability to influence stakeholders across technical and business functions.

Experience Required

• 8+ years' experience in cyber security, with strong vulnerability management expertise
• Hands‑on experience with Qualys, CrowdStrike, and Microsoft Defender
• Strong knowledge of ASD Essential Eight and practical implementation of maturity uplift initiatives
• Experience operating in regulated, critical infrastructure, or defence‑aligned environments
• Proven capability producing executive and governance reporting
• Strong stakeholder engagement and communication skills
• Relevant certifications such as CISSP, CEH, or Security+ are highly regarded

If you're passionate about reducing cyber risk and driving meaningful security outcomes in complex environments, we'd love to hear from you.