Vulnerability Management Lead – Process & Risk-Based

Bridge351; Evere; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Tech Visa program

Health and Life Insurance

Job summary

Bridge351 in Brussels is seeking an experienced security professional to lead vulnerability management improvements for a leading European banking group. You will redesign end-to-end processes, set up governance, and build reporting used by IT teams, risk owners and leadership.

This role involves aligning with ISO 27001 and NIS2 and driving change across the organisation. The position requires hands-on delivery, strong data storytelling, and the ability to coach teams on prioritisation and

Qualifications

• 6+ years in IT or information security, including 3+ years in vulnerability management.
• Proven experience designing or improving a security process end to end.
• Hands-on experience with an enterprise scanning platform (Tenable, Qualys, Rapid7, Tanium).
• Strong understanding of CVSS, exploitability data and risk-based prioritisation.
• Experience building security dashboards (Power BI, Tableau, Splunk or VM platform reporting).
• Familiarity with ISO 27001, NIST CSF or CIS Controls, and with NIS2.

Responsibilities

• Assess the current vulnerability lifecycle (discovery, triage, prioritisation, remediation, verification, closure) and identify gaps.
• Design and roll out a target process with clear roles (RACI), workflows and handovers between Security and IT.
• Industrialise risk-based prioritisation using contextual data.
• Implement remediation SLAs and an exception / risk-acceptance process.
• Improve scan coverage and asset inventory alignment so no critical asset is left unscanned.

Skills

Vulnerability management

Security process design

Dashboards reporting

Risk-based prioritisation

Stakeholder engagement

ISO 27001 / NIST / CIS Controls

Education

Master's degree

Tools

Tenable

Qualys

Rapid7

Tanium

Job description

Bridge351 in Brussels is seeking an experienced security professional to lead vulnerability management improvements for a leading European banking group. You will redesign end-to-end processes, set up governance, and build reporting used by IT teams, risk owners and leadership.

This role involves aligning with ISO 27001 and NIS2 and driving change across the organisation. The position requires hands-on delivery, strong data storytelling, and the ability to coach teams on prioritisation and