Vulnerability Manager

Function

Our client is looking for an experienced vulnerability management professional to help strengthen and mature the enterprise vulnerability programme across infrastructure, cloud, workplace, and application environments. In this role, you will take ownership of risk-based remediation, governance reporting, and stakeholder coordination, ensuring vulnerabilities are prioritised and resolved in line with agreed service levels and regulatory expectations.

Responsibilities

• Act as the main point of contact for vulnerability management within the security function.
• Own and continuously improve the end-to-end vulnerability management process, from scan ingestion through verified remediation and closure.
• Lead remediation efforts across IT, business, application, cloud, infrastructure, and security stakeholders.
• Monitor remediation performance, track ageing and trends, and ensure vulnerabilities are handled according to risk and priority.
• Manage exception handling, including compensating controls, formal approvals, and time-boxed risk acceptance.
• Prepare and present monthly governance reporting for senior stakeholders.
• Support audit readiness by maintaining evidence packs and compliance documentation.
• Promote vulnerability management best practices across the organisation.

Technical Skills

• Strong understanding of the vulnerability management lifecycle, including scanning, prioritisation, remediation, verification, and closure.
• Experience with CVSS scoring, exploitability analysis, threat intelligence, and business-criticality-based prioritisation.
• Knowledge of enterprise infrastructure, cloud, networking, servers, laptops, applications, and containers.
• Hands-on experience with Qualys, AWS Inspector, and Microsoft Defender Vulnerability Management.
• Experience in multi-cloud environments, specifically AWS and Azure.
• Familiarity with container security.
• Experience integrating vulnerability management processes with ITSM tooling such as Jira or ServiceNow.
• Awareness of NIS2 and related audit/compliance requirements.

Profile

• At least 5 years of experience in vulnerability management or patch management with direct ownership.
• Proven ability to work in complex, large-scale environments with legacy or technical debt exposure.
• Strong analytical mindset and the ability to turn data into clear reporting and actionable insights.
• Confident in collaborating with technical teams and business stakeholders to drive remediation commitments.
• Comfortable managing competing priorities and resolving capacity-versus-risk conflicts.

Practical Information

• Location: Brussels / hybrid
• Contract: full-time
• Initial contract duration: 3 months, renewable
• Languages: fluent English; Dutch and/or French is a plus

Contactperson & Reference

• Reference #: INW27952
• Pieter Messely
• pieter.messely@i4m.be