Vulnerability Manager

In4Matic; Brussel; Hybride; EUR 65 000 - 90 000; Plein temps

Résumé du poste

In4Matic is seeking an experienced vulnerability management professional to strengthen the enterprise programme across infrastructure, cloud, workplace and applications. You will own risk-based remediation, governance reporting, and stakeholder coordination to ensure vulnerabilities are prioritised and resolved in line with service levels and regulatory expectations.

Location: Brussels, hybrid work model. Initial contract duration: 3 months, renewable.

Qualifications

• 5+ years in vulnerability management or patch management with ownership.
• Experience navigating multi-cloud environments (AWS/Azure).
• Ability to turn data into clear, actionable risk insights.

Responsabilités

• Own end-to-end vulnerability management lifecycle from intake to remediation.
• Lead remediation across IT, business, applications, cloud, and infrastructure stakeholders.
• Monitor remediation performance, ageing trends, and risk-based prioritisation.
• Prepare and present monthly governance reporting for senior stakeholders.
• Support audit readiness with evidence packs and compliance documentation.

Connaissances

Vulnerability management lifecycle

CVSS scoring

Threat intelligence

Multi-cloud (AWS/Azure)

Jira/ServiceNow integration

Governance reporting

Outils

Qualys

AWS Inspector

Microsoft Defender Vulnerability Management

Jira

ServiceNow

Description du poste

Our client is looking for an experienced vulnerability management professional to help strengthen and mature the enterprise vulnerability programme across infrastructure, cloud, workplace, and application environments. In this role, you will take ownership of risk-based remediation, governance reporting, and stakeholder coordination, ensuring vulnerabilities are prioritised and resolved in line with agreed service levels and regulatory expectations.

Responsibilities

• Act as the main point of contact for vulnerability management within the security function.
• Own and continuously improve the end-to-end vulnerability management process, from scan ingestion through verified remediation and closure.
• Lead remediation efforts across IT, business, application, cloud, infrastructure, and security stakeholders.
• Monitor remediation performance, track ageing and trends, and ensure vulnerabilities are handled according to risk and priority.
• Manage exception handling, including compensating controls, formal approvals, and time-boxed risk acceptance.
• Prepare and present monthly governance reporting for senior stakeholders.
• Support audit readiness by maintaining evidence packs and compliance documentation.
• Promote vulnerability management best practices across the organisation.

Technical Skills

• Strong understanding of the vulnerability management lifecycle, including scanning, prioritisation, remediation, verification, and closure.
• Experience with CVSS scoring, exploitability analysis, threat intelligence, and business-criticality-based prioritisation.
• Knowledge of enterprise infrastructure, cloud, networking, servers, laptops, applications, and containers.
• Hands-on experience with Qualys, AWS Inspector, and Microsoft Defender Vulnerability Management.
• Experience in multi-cloud environments, specifically AWS and Azure.
• Familiarity with container security.
• Experience integrating vulnerability management processes with ITSM tooling such as Jira or ServiceNow.
• Awareness of NIS2 and related audit/compliance requirements.

Profile

• At least 5 years of experience in vulnerability management or patch management with direct ownership.
• Proven ability to work in complex, large-scale environments with legacy or technical debt exposure.
• Strong analytical mindset and the ability to turn data into clear reporting and actionable insights.
• Confident in collaborating with technical teams and business stakeholders to drive remediation commitments.
• Comfortable managing competing priorities and resolving capacity-versus-risk conflicts.

Practical Information

• Location: Brussels / hybrid
• Contract: full-time
• Initial contract duration: 3 months, renewable
• Languages: fluent English; Dutch and/or French is a plus

Contactperson & Reference

• Reference #: INW27952
• Pieter Messely
• [e-mail]