Team Lead – Vulnerability Management Expert

Team Lead – Vulnerability Management Expert

A large Belgian organization operating a complex and business-critical IT environment is looking for an experienced Team Lead – Vulnerability Management Expert to strengthen its Cybersecurity organization.

The role combines strong technical expertise in vulnerability management with team leadership, coordination and governance.

The successful candidate will lead and support vulnerability management activities across a complex enterprise IT landscape, ensuring that vulnerabilities are identified, assessed, prioritized, remediated and reported in a structured and risk-based manner.

This is a hands-on leadership role requiring close collaboration with Security, Infrastructure, Cloud, Network, Workplace, Application and DevOps teams.

Responsibilities

Vulnerability Management

• Lead the end-to-end Vulnerability Management lifecycle, from identification and assessment through remediation and closure.
• Coordinate vulnerability scanning across servers, endpoints, networks, cloud environments and applications.
• Analyze and qualify vulnerabilities based on CVSS, exploitability, asset criticality, business impact and threat intelligence.
• Prioritize remediation activities according to actual cyber risk rather than vulnerability severity alone.
• Coordinate remediation with infrastructure, application, cloud, network and security teams.
• Follow up on outstanding vulnerabilities and ensure remediation within agreed SLAs.
• Manage exceptions, risk acceptances and remediation delays.
• Identify recurring vulnerabilities and contribute to addressing their underlying root causes.
• Support vulnerability management related to patching, configuration weaknesses, obsolete technologies and security hardening.
• Monitor emerging and critical vulnerabilities and coordinate the appropriate response when urgent action is required.
• Ensure accurate vulnerability data, reporting and traceability.

Team Leadership & Coordination

• Lead and coordinate a team of security and vulnerability management specialists.
• Define priorities, distribute activities and monitor progress.
• Provide technical guidance and coaching to team members.
• Act as an escalation point for complex or critical vulnerabilities.
• Facilitate collaboration between Cybersecurity and technical delivery teams.
• Challenge remediation plans when necessary and ensure clear ownership.
• Drive continuous improvement of vulnerability management processes, tooling and governance.

Governance & Reporting

• Define and monitor KPIs/KRIs related to vulnerabilities, remediation performance, exposure and risk.
• Prepare dashboards and management reporting.
• Provide clear visibility on critical vulnerabilities, overdue remediation and systemic security weaknesses.
• Contribute to security governance, risk assessments and audit activities.
• Support compliance with relevant security policies, standards and regulatory requirements.
• Contribute to the definition and continuous improvement of vulnerability management policies, procedures and remediation SLAs.
• Present vulnerability risks and remediation status to both technical stakeholders and management.

Required Expertise

• Strong professional experience in Cybersecurity and Vulnerability Management.
• Proven experience leading or coordinating vulnerability management activities within a large and complex enterprise environment.
• Strong knowledge of vulnerability assessment, prioritization and remediation.
• Experience with enterprise vulnerability scanning and management solutions such as Qualys, Tenable/Nessus, Rapid7 or equivalent.
• Strong understanding of:
• CVE / CVSS
• CISA KEV and threat-based prioritization
• Vulnerability scanning
• Patch & remediation management
• Security hardening
• Windows and Linux environments
• Network and infrastructure security
• Cloud security
• Application and API security fundamentals
• OWASP vulnerabilities
• Risk management and security governance
• Ability to analyze technical vulnerabilities and translate them into business and security risks.
• Experience with ticketing, workflow and reporting solutions such as ServiceNow, Jira, Power BI or equivalent.
• Good understanding of security frameworks and standards such as ISO 27001, NIST, CIS Controls and OWASP.