Senior Vulnerability Manager

Nishtech; Brussel; On-site; EUR 90,000 - 120,000; Full time

Job summary

Nishtech in Belgium is seeking a Senior Vulnerability Manager to lead and mature an enterprise-wide vulnerability management programme across on-premises and cloud environments. You will own the end-to-end lifecycle from detection to closure and drive remediation commitments with IT, security and business stakeholders.

You will define risk-based prioritisation using CVSS and threat intelligence, oversee remediation SLAs, monitor KPIs/KRIs, and ensure regulatory compliance.

Qualifications

• 5+ years of experience in vulnerability or patch management.
• Direct ownership of vulnerability management programmes.
• Strong understanding of the vulnerability management lifecycle.
• Strong knowledge of CVSS scoring methodologies.
• Experience with vulnerability remediation and patch management processes.
• Understanding of threat intelligence and exploitability analysis.
• Enterprise infrastructure knowledge.
• Cloud and networking technology knowledge.

Responsibilities

• Own the end-to-end vulnerability management operating process.
• Lead vulnerability identification, assessment, prioritisation and remediation.
• Define and continuously improve vulnerability management scope and governance.
• Establish and maintain RACI responsibilities across delivery teams and external partners.
• Define risk-based prioritisation using CVSS, exploitability, business criticality and threat intelligence.
• Define and enforce risk-based remediation SLAs.
• Monitor vulnerability management KPIs and KRIs.
• Coordinate vulnerability detection, remediation and patching activities.
• Engage IT, security, business and technical stakeholders to drive remediation commitments.
• Monitor remediation performance across teams and environments.
• Track vulnerability coverage, remediation attainment, ageing and end-of-life trends.
• Manage vulnerability exceptions, including compensating controls, accountable authorities and expiry dates.
• Prepare governance and risk reporting for senior stakeholders.
• Maintain audit evidence supporting vulnerability management and regulatory compliance.
• Promote vulnerability management best practices across the organisation.

Skills

Vulnerability management

Patch management

CVSS knowledge

Threat intelligence

Cloud & networking

Enterprise infrastructure

Job description

About the Role

We are looking for a Senior Vulnerability Manager to lead and mature an enterprise-wide vulnerability management programme within a complex technology environment. You will own the vulnerability management lifecycle from detection and assessment through risk-based prioritisation, remediation tracking, verification and closure.

You will work closely with IT, infrastructure, cloud, application, security, risk and business stakeholders to drive remediation commitments and ensure compliance with agreed SLAs and regulatory requirements. The role also involves leading vulnerability analysts and stakeholders, improving governance and reporting, and continuously strengthening vulnerability management capabilities across on-premises, cloud, workplace, application and container environments.

Key Responsibilities

• Own the end-to-end vulnerability management operating process.
• Lead vulnerability identification, assessment, prioritisation and remediation.
• Define and continuously improve vulnerability management scope and governance.
• Establish and maintain RACI responsibilities across delivery teams and external partners.
• Define risk-based prioritisation using CVSS, exploitability, business criticality and threat intelligence.
• Define and enforce risk-based remediation SLAs.
• Monitor vulnerability management KPIs and KRIs.
• Coordinate vulnerability detection, remediation and patching activities.
• Engage IT, security, business and technical stakeholders to drive remediation commitments.
• Monitor remediation performance across teams and environments.
• Track vulnerability coverage, remediation attainment, ageing and end-of-life trends.
• Manage vulnerability exceptions, including compensating controls, accountable authorities and expiry dates.
• Prepare governance and risk reporting for senior stakeholders.
• Maintain audit evidence supporting vulnerability management and regulatory compliance.
• Promote vulnerability management best practices across the organisation.

Required Skills

Mandatory Skills

• 5+ years of experience in vulnerability or patch management.
• Direct ownership of vulnerability management programmes.
• Strong understanding of the vulnerability management lifecycle.
• Strong knowledge of CVSS scoring methodologies.
• Experience with vulnerability remediation and patch management processes.
• Understanding of threat intelligence and exploitability analysis.
• Enterprise infrastructure knowledge.
• Cloud and networking technology knowledge.