Cyber Risk and Vulnerability Manager

Job Responsibilities:

• Own and continuously improve FrieslandCampina's global Vulnerability Management capability, including governance, tools, processes, reporting, and service performance.
• Lead the end-to-end vulnerability management lifecycle, ensuring vulnerabilities are identified, prioritized, remediated, and closed on time.
• Translate technical vulnerabilities and security weaknesses into business risk insights and remediation priorities.
• Review and challenge risk exception requests, ensuring appropriate compensating controls are in place.
• Develop and present management reports, dashboards, and cyber risk insights.
• Drive accountability among technology teams, asset owners, and service providers to improve remediation performance.
• Coordinate vulnerability assessments and risk reviews for new technologies, business projects, and acquisitions.
• Support audit, assurance, compliance, and regulatory activities related to vulnerability and cyber risk management.

Job Requirements:

• Bachelor's or Master's Degree in Information Security, Cyber Security, Technology, Risk Management, Audit, or a related field.
• Minimum 5 years of experience in Cyber Security, Vulnerability Management, or Technology Risk Management.
• Proven experience managing enterprise-wide Vulnerability Management programmes, including remediation governance, risk exception management, and continuous improvement initiatives.
• Strong understanding of cyber risk management and security operations, with the ability to translate technical vulnerabilities into business risks, remediation priorities, and actionable recommendations.
• Good knowledge of security controls, IT operations, asset management, and risk-based security practices, preferably within complex enterprise environments.
• Strong stakeholder management, communication, and influencing skills, with experience driving accountability and remediation actions across technology teams, asset owners, and third-party service providers. A good sense of humour will be an added advantage 😊
• Experience developing management reporting, dashboards, and risk metrics, coupled with a pragmatic, results-driven mindset and fluency in English.
• Professional certifications (e.g., CISSP, CISM, CRISC, CISA) and experience across IT/OT environments or M&A integrations are advantageous.