Vulnerability Manager

NISH Tech BV; Brussel Hoofdstad; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

NISH Tech BV is seeking a Senior Vulnerability Manager to lead and mature an enterprise-wide vulnerability management programme within a complex technology environment. You will own the lifecycle from detection through remediation, verification and closure, driving governance and reporting across IT, security, risk and business stakeholders.

You will coordinate remediation commitments, establish risk-based prioritisation using CVSS and threat intelligence, and lead analysts and external partners

Qualifications

• 5+ years in vulnerability or patch management.
• Direct ownership of vulnerability management programmes.
• Strong understanding of the vulnerability management lifecycle.
• Strong knowledge of CVSS scoring methodologies.
• Experience with vulnerability remediation and patch management processes.
• Understanding of threat intelligence and exploitability analysis.
• Enterprise infrastructure knowledge.
• Cloud and networking technology knowledge.
• Strong analytical and reporting capabilities.
• Fluent English; Dutch and/or French language skills are a plus.

Responsabilités

• Own the end-to-end vulnerability management operating process.
• Lead vulnerability identification, assessment, prioritisation and remediation.
• Define and continuously improve vulnerability management scope and governance.
• Establish and maintain RACI responsibilities across delivery teams and external partners.
• Define risk-based prioritisation using CVSS, exploitability, business criticality and threat intelligence.
• Define and enforce risk-based remediation SLAs.
• Monitor vulnerability management KPIs and KRIs.
• Coordinate vulnerability detection, remediation and patching activities.
• Engage IT, security, business and technical stakeholders to drive remediation commitments.
• Monitor remediation performance across teams and environments.
• Track vulnerability coverage, remediation attainment, ageing and end-of-life trends.
• Manage vulnerability exceptions, including compensating controls, accountable authorities and expiry dates.
• Prepare governance and risk reporting for senior stakeholders.
• Maintain audit evidence supporting vulnerability management and regulatory compliance.
• Promote vulnerability management best practices across the organisation.

Connaissances

Vulnerability lifecycle

Program ownership

CVSS knowledge

Remediation processes

Threat intelligence

Infrastructure knowledge

Cloud & networking

Analytical & reporting

English fluency

Dutch and/or French language skills

Outils

Qualys

AWS Inspector

Microsoft Defender Vulnerability Management

Description du poste

About the Role

We are looking for a Senior Vulnerability Manager to lead and mature an enterprise-wide vulnerability management programme within a complex technology environment. You will own the vulnerability management lifecycle from detection and assessment through risk-based prioritisation, remediation tracking, verification and closure.

You will work closely with IT, infrastructure, cloud, application, security, risk and business stakeholders to drive remediation commitments and ensure compliance with agreed SLAs and regulatory requirements. The role also involves leading vulnerability analysts and stakeholders, improving governance and reporting, and continuously strengthening vulnerability management capabilities across on-premises, cloud, workplace, application and container environments.

Key Responsibilities

• Own the end-to-end vulnerability management operating process.
• Lead vulnerability identification, assessment, prioritisation and remediation.
• Define and continuously improve vulnerability management scope and governance.
• Establish and maintain RACI responsibilities across delivery teams and external partners.
• Define risk-based prioritisation using CVSS, exploitability, business criticality and threat intelligence.
• Define and enforce risk-based remediation SLAs.
• Monitor vulnerability management KPIs and KRIs.
• Coordinate vulnerability detection, remediation and patching activities.
• Engage IT, security, business and technical stakeholders to drive remediation commitments.
• Monitor remediation performance across teams and environments.
• Track vulnerability coverage, remediation attainment, ageing and end-of-life trends.
• Manage vulnerability exceptions, including compensating controls, accountable authorities and expiry dates.
• Prepare governance and risk reporting for senior stakeholders.
• Maintain audit evidence supporting vulnerability management and regulatory compliance.
• Promote vulnerability management best practices across the organisation.

Required Skills

Mandatory Skills

• 5+ years of experience in vulnerability or patch management.
• Direct ownership of vulnerability management programmes.
• Strong understanding of the vulnerability management lifecycle.
• Strong knowledge of CVSS scoring methodologies.
• Experience with vulnerability remediation and patch management processes.
• Understanding of threat intelligence and exploitability analysis.
• Enterprise infrastructure knowledge.
• Cloud and networking technology knowledge.
• Strong analytical and reporting capabilities.
• Fluent English.
• Hands-on experience with Qualys.
• Hands-on experience with AWS Inspector.
• Hands-on experience with Microsoft Defender Vulnerability Management.

Nice-to-Have Skills

• Multi-cloud experience across AWS and Azure.
• Container security experience.
• Familiarity with NIS2.
• ITSM integration experience with Jira and/or ServiceNow.
• Dutch and/or French language skills.
• Experience in large enterprises or public-sector environments.
• Experience working with legacy infrastructure and technical debt.

Experience

5+ years in vulnerability or patch management with direct programme ownership.

Languages

• English: Fluent – Mandatory
• Either Dutch or French: Fluent - Mandatory
• The other language between Dutch or French: Elementary proficiency

About NISH Tech BV

NISH Tech BV is an IT consulting and staffing company connecting skilled technology professionals with leading organizations across Europe. We support clients across cybersecurity, digital transformation, data, infrastructure and enterprise technology, helping organizations access specialized expertise for critical technology initiatives.