Vulnerability Management Expert

Il y a 2 heures

Brussels, Belgique Huxley Temps plein

This role focuses on transforming vulnerability management into a risk-based, measurable, and governance-driven process . The consultant will redesign the end-to-end vulnerability management lifecycle, establish governance and reporting frameworks, improve prioritization and remediation processes, and provide clear visibility on risks and trends to management. The mission is highly hands-on, requiring close collaboration with application, infrastructure, and Group teams.

Main Responsibilities

Process Design & Improvement

  • Assess and improve the current vulnerability management lifecycle.
  • Design and implement a target operating model with clear roles, workflows, and responsibilities.
  • Enhance risk-based vulnerability prioritization using contextual factors.
  • Define and implement remediation SLAs and risk acceptance processes.
  • Improve scan coverage and asset inventory alignment to ensure critical assets are assessed.

Reporting & Metrics

  • Define and manage KPIs/KRIs such as scan coverage, MTTR, SLA compliance, critical exposure, backlog ageing, and exceptions.
  • Build dashboards for operational teams, management, and executives.
  • Automate reporting and data collection.
  • Deliver trend analysis and actionable recommendations.

Governance & Compliance

  • Develop and maintain vulnerability management policies, standards, and procedures.
  • Ensure alignment with relevant security frameworks and regulatory requirements.

Stakeholder Management

  • Drive adoption of improved vulnerability management processes.
  • Coach and raise awareness among IT and business teams regarding prioritization and remediation best practices.

Tooling & Integration

  • Integrate vulnerability data with CMDB and other reference data sources to support automated assignment and tracking.

Required Profile

Experience

  • Minimum 6 years in IT or Information Security.
  • At least 3 years specifically in Vulnerability Management or a related domain.
  • Proven experience designing or improving security processes end-to-end.
  • Experience in regulated industries (financial services preferred).

Technical Skills

  • Hands-on experience with tools such as Tenable, Qualys, Rapid7, or Tanium.
  • Strong knowledge of CVSS, exploitability analysis, and risk-based prioritization.
  • Experience with security metrics and dashboarding tools (Power BI, Tableau, Splunk, etc.).
  • Good understanding of operating systems, networks, cloud environments, and application technologies.
  • Familiarity with ISO 27001, NIST CSF, CIS Controls, and NIS2.

Nice to Have

  • Python or PowerShell scripting.
  • ServiceNow Vulnerability Response.
  • ITIL, Prince2, Agile, or change management experience.
  • CISSP, CISM, or CRISC certifications.

Languages

  • Dutch.
  • French (understanding business conversations).
  • English (strong written and verbal communication).

Soft Skills

  • Structured and pragmatic approach.
  • Strong analytical and data-driven mindset.
  • Ability to communicate complex topics clearly through reporting and metrics.
  • Strong influencing and stakeholder management skills, able to drive change without direct authority.

Work Setup

  • Hybride
  • Master's degree preferred.
  • Banking experience is considered a strong advantage.