Vulnerability Management Expert

pThis role focuses on transforming vulnerability management into a brisk-based, measurable, and governance-driven process /b. The consultant will redesign the end-to-end vulnerability management lifecycle, establish governance and reporting frameworks, improve prioritization and remediation processes, and provide clear visibility on risks and trends to management. The mission is highly hands-on, requiring close collaboration with application, infrastructure, and Group teams. /ph3Main Responsibilities /h3pbProcess Design Improvement /b /pulliAssess and improve the current vulnerability management lifecycle. /liliDesign and implement a target operating model with clear roles, workflows, and responsibilities. /liliEnhance risk-based vulnerability prioritization using contextual factors. /liliDefine and implement remediation SLAs and risk acceptance processes. /liliImprove scan coverage and asset inventory alignment to ensure critical assets are assessed. /li /ulpbReporting Metrics /b /pulliDefine and manage KPIs/KRIs such as scan coverage, MTTR, SLA compliance, critical exposure, backlog ageing, and exceptions. /liliBuild dashboards for operational teams, management, and executives. /liliAutomate reporting and data collection. /liliDeliver trend analysis and actionable recommendations. /li /ulpbGovernance Compliance /b /pulliDevelop and maintain vulnerability management policies, standards, and procedures. /liliEnsure alignment with relevant security frameworks and regulatory requirements. /li /ulpbStakeholder Management /b /pulliDrive adoption of improved vulnerability management processes. /liliCoach and raise awareness among IT and business teams regarding prioritization and remediation best practices. /li /ulpbTooling Integration /b /pulliIntegrate vulnerability data with CMDB and other reference data sources to support automated assignment and tracking. /li /ulh3Required Profile /h3pbExperience /b /pulliMinimum 6 years in IT or Information Security. /liliAt least 3 years specifically in Vulnerability Management or a related domain. /liliProven experience designing or improving security processes end-to-end. /liliExperience in regulated industries (financial services preferred). /li /ulpbTechnical Skills /b /pulliHands-on experience with tools such as Tenable, Qualys, Rapid7, or Tanium. /liliStrong knowledge of CVSS, exploitability analysis, and risk-based prioritization. /liliExperience with security metrics and dashboarding tools (Power BI, Tableau, Splunk, etc.). /liliGood understanding of operating systems, networks, cloud environments, and application technologies. /liliFamiliarity with ISO 27001, NIST CSF, CIS Controls, and NIS2. /li /ulpbNice to Have /b /pulliPython or PowerShell scripting. /liliServiceNow Vulnerability Response. /liliITIL, Prince2, Agile, or change management experience. /liliCISSP, CISM, or CRISC certifications. /li /ulpbLanguages /b /pulliDutch. /liliFrench (understanding business conversations). /liliEnglish (strong written and verbal communication). /li /ulh3Soft Skills /h3ulliStructured and pragmatic approach. /liliStrong analytical and data-driven mindset. /liliAbility to communicate complex topics clearly through reporting and metrics. /liliStrong influencing and stakeholder management skills, able to drive change without direct authority. /li /ulh3Work Setup /h3ulliHybride /liliMaster's degree preferred. /liliBanking experience is considered a strong advantage. /li /ul