Senior Vulnerability Program Lead

NISH Tech BV; Brussel Hoofdstad; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

NISH Tech BV is seeking a Senior Vulnerability Manager to lead and mature an enterprise-wide vulnerability management programme within a complex technology environment. You will own the lifecycle from detection through remediation, verification and closure, driving governance and reporting across IT, security, risk and business stakeholders.

You will coordinate remediation commitments, establish risk-based prioritisation using CVSS and threat intelligence, and lead analysts and external partners

Qualifications

• 5+ years in vulnerability or patch management.
• Direct ownership of vulnerability management programmes.
• Strong understanding of the vulnerability management lifecycle.
• Strong knowledge of CVSS scoring methodologies.
• Experience with vulnerability remediation and patch management processes.
• Understanding of threat intelligence and exploitability analysis.
• Enterprise infrastructure knowledge.
• Cloud and networking technology knowledge.
• Strong analytical and reporting capabilities.
• Fluent English; Dutch and/or French language skills are a plus.

Responsabilités

• Own the end-to-end vulnerability management operating process.
• Lead vulnerability identification, assessment, prioritisation and remediation.
• Define and continuously improve vulnerability management scope and governance.
• Establish and maintain RACI responsibilities across delivery teams and external partners.
• Define risk-based prioritisation using CVSS, exploitability, business criticality and threat intelligence.
• Define and enforce risk-based remediation SLAs.
• Monitor vulnerability management KPIs and KRIs.
• Coordinate vulnerability detection, remediation and patching activities.
• Engage IT, security, business and technical stakeholders to drive remediation commitments.
• Monitor remediation performance across teams and environments.
• Track vulnerability coverage, remediation attainment, ageing and end-of-life trends.
• Manage vulnerability exceptions, including compensating controls, accountable authorities and expiry dates.
• Prepare governance and risk reporting for senior stakeholders.
• Maintain audit evidence supporting vulnerability management and regulatory compliance.
• Promote vulnerability management best practices across the organisation.

Connaissances

Vulnerability lifecycle

Program ownership

CVSS knowledge

Remediation processes

Threat intelligence

Infrastructure knowledge

Cloud & networking

Analytical & reporting

English fluency

Dutch and/or French language skills

Outils

Qualys

AWS Inspector

Microsoft Defender Vulnerability Management

Description du poste

NISH Tech BV is seeking a Senior Vulnerability Manager to lead and mature an enterprise-wide vulnerability management programme within a complex technology environment. You will own the lifecycle from detection through remediation, verification and closure, driving governance and reporting across IT, security, risk and business stakeholders.

You will coordinate remediation commitments, establish risk-based prioritisation using CVSS and threat intelligence, and lead analysts and external partners