Strategic Vulnerability & Remediation Leader

Nishtech; Brussel; On-site; EUR 90,000 - 120,000; Full time

Job summary

Nishtech in Belgium is seeking a Senior Vulnerability Manager to lead and mature an enterprise-wide vulnerability management programme across on-premises and cloud environments. You will own the end-to-end lifecycle from detection to closure and drive remediation commitments with IT, security and business stakeholders.

You will define risk-based prioritisation using CVSS and threat intelligence, oversee remediation SLAs, monitor KPIs/KRIs, and ensure regulatory compliance.

Qualifications

• 5+ years of experience in vulnerability or patch management.
• Direct ownership of vulnerability management programmes.
• Strong understanding of the vulnerability management lifecycle.
• Strong knowledge of CVSS scoring methodologies.
• Experience with vulnerability remediation and patch management processes.
• Understanding of threat intelligence and exploitability analysis.
• Enterprise infrastructure knowledge.
• Cloud and networking technology knowledge.

Responsibilities

• Own the end-to-end vulnerability management operating process.
• Lead vulnerability identification, assessment, prioritisation and remediation.
• Define and continuously improve vulnerability management scope and governance.
• Establish and maintain RACI responsibilities across delivery teams and external partners.
• Define risk-based prioritisation using CVSS, exploitability, business criticality and threat intelligence.
• Define and enforce risk-based remediation SLAs.
• Monitor vulnerability management KPIs and KRIs.
• Coordinate vulnerability detection, remediation and patching activities.
• Engage IT, security, business and technical stakeholders to drive remediation commitments.
• Monitor remediation performance across teams and environments.
• Track vulnerability coverage, remediation attainment, ageing and end-of-life trends.
• Manage vulnerability exceptions, including compensating controls, accountable authorities and expiry dates.
• Prepare governance and risk reporting for senior stakeholders.
• Maintain audit evidence supporting vulnerability management and regulatory compliance.
• Promote vulnerability management best practices across the organisation.

Skills

Vulnerability management

Patch management

CVSS knowledge

Threat intelligence

Cloud & networking

Enterprise infrastructure

Job description

Nishtech in Belgium is seeking a Senior Vulnerability Manager to lead and mature an enterprise-wide vulnerability management programme across on-premises and cloud environments. You will own the end-to-end lifecycle from detection to closure and drive remediation commitments with IT, security and business stakeholders.

You will define risk-based prioritisation using CVSS and threat intelligence, oversee remediation SLAs, monitor KPIs/KRIs, and ensure regulatory compliance.