Vulnerability Manager

In4Matic; Brussel Hoofdstad; Hybride; EUR 70 000 - 110 000; Plein temps

Résumé du poste

In4Matic in Brussels is seeking an experienced vulnerability management professional to strengthen and mature the enterprise programme across infrastructure, cloud, workplace, and application environments. You will own risk-based remediation, governance reporting, and stakeholder coordination to ensure vulnerabilities are prioritized and resolved in line with SLAs and regulatory expectations.

Join a team that drives remediation across IT, business units, and security stakeholders, leveraging

Qualifications

• At least 5 years of vulnerability management or patch management with direct ownership.
• Experience in complex, large-scale environments with legacy or debt exposure.
• Strong analytical mindset and the ability to turn data into clear reporting and actionable insights.
• Confident in collaborating with technical teams and business stakeholders to drive remediation commitments.
• Fluent in English; Dutch and/or French is a plus.

Responsabilités

• Act as the main point of contact for vulnerability management within the security function.
• Own and continuously improve the end-to-end vulnerability management process, from scan ingestion through verified remediation and closure.
• Lead remediation efforts across IT, business, application, cloud, infrastructure, and security stakeholders.
• Monitor remediation performance, track ageing and trends, and ensure vulnerabilities are handled according to risk and priority.
• Manage exception handling, including compensating controls, formal approvals, and time-boxed risk acceptance.
• Prepare and present monthly governance reporting for senior stakeholders.
• Support audit readiness by maintaining evidence packs and compliance documentation.
• Promote vulnerability management best practices across the organisation.

Connaissances

Vulnerability management lifecycle

CVSS scoring

Threat intelligence

Multi-cloud: AWS/Azure

Container security

ITSM tooling: Jira/ServiceNow

NIS2 and compliance awareness

Outils

Qualys

AWS Inspector

Microsoft Defender Vulnerability Management

Jira

ServiceNow

Description du poste

Function

Our client is looking for an experienced vulnerability management professional to help strengthen and mature the enterprise vulnerability programme across infrastructure, cloud, workplace, and application environments. In this role, you will take ownership of risk-based remediation, governance reporting, and stakeholder coordination, ensuring vulnerabilities are prioritised and resolved in line with agreed service levels and regulatory expectations.

Responsibilities

• Act as the main point of contact for vulnerability management within the security function.
• Own and continuously improve the end-to-end vulnerability management process, from scan ingestion through verified remediation and closure.
• Lead remediation efforts across IT, business, application, cloud, infrastructure, and security stakeholders.
• Monitor remediation performance, track ageing and trends, and ensure vulnerabilities are handled according to risk and priority.
• Manage exception handling, including compensating controls, formal approvals, and time-boxed risk acceptance.
• Prepare and present monthly governance reporting for senior stakeholders.
• Support audit readiness by maintaining evidence packs and compliance documentation.
• Promote vulnerability management best practices across the organisation.

Technical Skills

• Strong understanding of the vulnerability management lifecycle, including scanning, prioritisation, remediation, verification, and closure.
• Experience with CVSS scoring, exploitability analysis, threat intelligence, and business-criticality-based prioritisation.
• Knowledge of enterprise infrastructure, cloud, networking, servers, laptops, applications, and containers.
• Hands-on experience with Qualys, AWS Inspector, and Microsoft Defender Vulnerability Management.
• Experience in multi-cloud environments, specifically AWS and Azure.
• Familiarity with container security.
• Experience integrating vulnerability management processes with ITSM tooling such as Jira or ServiceNow.
• Awareness of NIS2 and related audit/compliance requirements.

Profile

• At least 5 years of experience in vulnerability management or patch management with direct ownership.
• Proven ability to work in complex, large-scale environments with legacy or technical debt exposure.
• Strong analytical mindset and the ability to turn data into clear reporting and actionable insights.
• Confident in collaborating with technical teams and business stakeholders to drive remediation commitments.
• Comfortable managing competing priorities and resolving capacity-versus-risk conflicts.

Practical Information

• Location: Brussels / hybrid
• Contract: full-time
• Initial contract duration: 3 months, renewable
• Languages: fluent English; Dutch and/or French is a plus

Contactperson & Reference

• Reference #: INW27952
• Pieter Messely
• [e-mail]