Vulnerability Management Expert

Huxley; Brussel Hoofdstad; Hybrid; EUR 90,000 - 120,000; Part time

Job summary

Huxley is seeking a senior consultant to transform vulnerability management into a governance-driven, risk-based process. You will redesign the end-to-end lifecycle, establish governance and reporting, and improve prioritization and remediation.

The role requires hands-on collaboration with IT and business teams, building KPI dashboards, and ensuring compliance with security frameworks. Hybrid work setup in Belgium is offered.

Qualifications

• Minimum 6 years in IT or Information Security.
• At least 3 years specifically in Vulnerability Management or a related domain.
• Proven experience designing or improving security processes end-to-end.
• Experience in regulated industries (financial services preferred).

Responsibilities

• Process Design & Improvement: Assess and improve the vulnerability management lifecycle; design an operating model with clear roles and workflows; enhance risk-based prioritization; define remediation SLAs and risk acceptance; align asset inventory to critical assets.

Skills

Dutch

French understanding

English communication

Analytical mindset

Stakeholder management

Education

Master's degree preferred

Tools

Tenable

Qualys

Rapid7

Tanium

Power BI

Tableau

Splunk

ServiceNow Vulnerability Response

Job description

This role focuses on transforming vulnerability management into a risk-based, measurable, and governance-driven process. The consultant will redesign the end-to-end vulnerability management lifecycle, establish governance and reporting frameworks, improve prioritization and remediation processes, and provide clear visibility on risks and trends to management. The mission is highly hands-on, requiring close collaboration with application, infrastructure, and Group teams.

Main Responsibilities

Process Design & Improvement

• Assess and improve the current vulnerability management lifecycle.
• Design and implement a target operating model with clear roles, workflows, and responsibilities.
• Enhance risk-based vulnerability prioritization using contextual factors.
• Define and implement remediation SLAs and risk acceptance processes.
• Improve scan coverage and asset inventory alignment to ensure critical assets are assessed.

Reporting & Metrics

• Define and manage KPIs/KRIs such as scan coverage, MTTR, SLA compliance, critical exposure, backlog ageing, and exceptions.
• Build dashboards for operational teams, management, and executives.
• Automate reporting and data collection.
• Deliver trend analysis and actionable recommendations.

Governance & Compliance

• Develop and maintain vulnerability management policies, standards, and procedures.
• Ensure alignment with relevant security frameworks and regulatory requirements.

Stakeholder Management

• Drive adoption of improved vulnerability management processes.
• Coach and raise awareness among IT and business teams regarding prioritization and remediation best practices.

Tooling & Integration

• Integrate vulnerability data with CMDB and other reference data sources to support automated assignment and tracking.

Required Profile

Experience

• Minimum 6 years in IT or Information Security.
• At least 3 years specifically in Vulnerability Management or a related domain.
• Proven experience designing or improving security processes end-to-end.
• Experience in regulated industries (financial services preferred).

Technical Skills

• Hands-on experience with tools such as Tenable, Qualys, Rapid7, or Tanium.
• Strong knowledge of CVSS, exploitability analysis, and risk-based prioritization.
• Experience with security metrics and dashboarding tools (Power BI, Tableau, Splunk, etc.).
• Good understanding of operating systems, networks, cloud environments, and application technologies.
• Familiarity with ISO 27001, NIST CSF, CIS Controls, and NIS2.

Nice to Have

• Python or PowerShell scripting.
• ServiceNow Vulnerability Response.
• ITIL, Prince2, Agile, or change management experience.
• CISSP, CISM, or CRISC certifications.

Languages

• Dutch.
• French (understanding business conversations).
• English (strong written and verbal communication).

Soft Skills

• Structured and pragmatic approach.
• Strong analytical and data-driven mindset.
• Ability to communicate complex topics clearly through reporting and metrics.
• Strong influencing and stakeholder management skills, able to drive change without direct authority.

Work Setup

• Hybride
• Master's degree preferred.
• Banking experience is considered a strong advantage.