Vulnerability & Patch Management (Associate) Manager

Sia Partners; Amsterdam; On-site; EUR 75,000 - 95,000; Full time

Benefits offered by this job

Competitive salary

Flexible transport options

Training plan for professional development

Work from home options

International collaboration opportunities

Job summary

Sia Partners in Amsterdam is seeking an experienced Vulnerability & Patch Management (Associate) Manager to manage the end-to-end vulnerability lifecycle in cloud environments. You will lead risk-based prioritization, oversee patch management processes, and collaborate with various teams to enhance security. The ideal candidate will have 6–10 years of cybersecurity experience, proficiency in Tenable, and strong communication skills in English and Dutch.

The role offers a competitive salary, flexible working options, and opportunities for professional development in an international environment.

Qualifications

• 6–10 years of experience in cybersecurity, focusing on vulnerability and patch management.
• Hands-on expertise with Tenable One or willingness to transition from Tenable.io/Tenable.sc/Nessus.
• Solid understanding of operating systems and networking.
• Strong analytical, prioritization, and stakeholder-communication skills.
• Fluent in English and Dutch.

Responsibilities

• Operate and optimize the Vulnerability & Patch platform.
• Lead risk-based prioritization of vulnerabilities with Tenable One.
• Design and oversee patch management processes.
• Track remediation SLAs and report on risk exposure.
• Collaborate with teams to embed security into workflows.
• Maintain awareness of emerging threats and translate into plans.
• Support audits and improve security policies.

Skills

Cybersecurity expertise

Vulnerability management

Analytical skills

Stakeholder communication

Cloud security (GCP, AWS)

Tenable experience

Operating systems (Windows/Linux)

Job description

Join Sia as a Vulnerability & Patch Management (Associate) Manager.

Sia is a next‑generation, global management consulting group. Founded in 1999, we were born digital. Today our strategy and management capabilities are augmented by data science, enhanced by creativity and driven by responsibility. We help clients initiate, navigate and benefit from transformation.

Job description

About the Role

We are seeking an experienced Vulnerability & Patch Management (Associate) Manager, with experience in owning the end‑to‑end vulnerability lifecycle: from discovery and prioritization to remediation and verification on cloud environments (primary GCP then AWS).

Key Responsibilities

• Operate and optimize the Vulnerability & Patch platform for vulnerability scanning, asset discovery, and exposure management across the enterprise.
• Lead risk‑based prioritization of vulnerabilities using Tenable One's analytics and exposure scoring.
• Design, coordinate, and oversee patch management processes, balancing security needs with the availability requirements of a high‑uptime trading environment.
• Track remediation SLAs, report on risk exposure, and drive timely closure with system and application owners.
• Collaborate with infrastructure, DevOps, and cloud teams to embed security into deployment and maintenance workflows.
• Maintain awareness of emerging threats, CVEs, and exploit trends, translating them into actionable remediation plans.
• Support audits and contribute to continuous improvement of security policies and standards.

Qualifications

Required Qualifications

• 6–10 years of experience in cybersecurity, with a strong focus on vulnerability and patch management.
• Hands‑on expertise with the Tenable One platform (or strong Tenable.io / Tenable.sc / Nessus experience with willingness to transition).
• Solid understanding of operating systems (Windows/Linux), networking, and common attack vectors.
• Strong analytical, prioritization, and stakeholder‑communication skills.
• English & Dutch communication and presentation skills.

Nice to Have

• ISO 27001 knowledge or certification (e.g., Lead Implementer / Lead Auditor).
• Google Cloud Platform certifications (e.g., Professional Cloud Security Engineer) are highly valued.
• Experience in critical infrastructure, energy, or other highly regulated/high‑availability sectors.

Additional information

What do we offer?

• Competitive salary with great extra advantages: a flexible mobility plan, a clear and structured yearly salary increase and bonuses.
• Flexible transport options that match your personal needs.
• Training plan to develop yourself as an expert in your discipline.
• You have the opportunity to work from home, the client or from our inspiring office in Amsterdam.
• Working in an international environment which creates opportunities to share knowledge and work together on international projects with colleagues all over the world.

We are unable to provide a work permit for this position.