Vulnerability Management Lead — Cloud & Infra Security (Hybrid)

In4Matic; Brussel Hoofdstad; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

In4Matic in Brussels is seeking an experienced vulnerability management professional to strengthen and mature the enterprise programme across infrastructure, cloud, workplace, and application environments. You will own risk-based remediation, governance reporting, and stakeholder coordination to ensure vulnerabilities are prioritized and resolved in line with SLAs and regulatory expectations.

Join a team that drives remediation across IT, business units, and security stakeholders, leveraging

Qualifications

• At least 5 years of vulnerability management or patch management with direct ownership.
• Experience in complex, large-scale environments with legacy or debt exposure.
• Strong analytical mindset and the ability to turn data into clear reporting and actionable insights.
• Confident in collaborating with technical teams and business stakeholders to drive remediation commitments.
• Fluent in English; Dutch and/or French is a plus.

Responsabilités

• Act as the main point of contact for vulnerability management within the security function.
• Own and continuously improve the end-to-end vulnerability management process, from scan ingestion through verified remediation and closure.
• Lead remediation efforts across IT, business, application, cloud, infrastructure, and security stakeholders.
• Monitor remediation performance, track ageing and trends, and ensure vulnerabilities are handled according to risk and priority.
• Manage exception handling, including compensating controls, formal approvals, and time-boxed risk acceptance.
• Prepare and present monthly governance reporting for senior stakeholders.
• Support audit readiness by maintaining evidence packs and compliance documentation.
• Promote vulnerability management best practices across the organisation.

Connaissances

Vulnerability management lifecycle

CVSS scoring

Threat intelligence

Multi-cloud: AWS/Azure

Container security

ITSM tooling: Jira/ServiceNow

NIS2 and compliance awareness

Outils

Qualys

AWS Inspector

Microsoft Defender Vulnerability Management

Jira

ServiceNow

Description du poste

In4Matic in Brussels is seeking an experienced vulnerability management professional to strengthen and mature the enterprise programme across infrastructure, cloud, workplace, and application environments. You will own risk-based remediation, governance reporting, and stakeholder coordination to ensure vulnerabilities are prioritized and resolved in line with SLAs and regulatory expectations.

Join a team that drives remediation across IT, business units, and security stakeholders, leveraging