Senior Lead- Vulnerability Management
Summary
The Senior Lead for Vulnerability Management will oversee the organization's vulnerability scanning, assessment, and remediation strategy. This role involves coordinating with cross-functional teams, managing zero-day responses, and reporting on security risks using tools like Tenable, Qualys, or Microsoft Defender.
- Lead the organization's Vulnerability Management program and strategy.
- Oversee vulnerability scanning, assessment, prioritization, and remediation activities.
- Monitor remediation progress and enforce agreed SLAs.
- Coordinate with IT, Cloud, Infrastructure, Application, and Security teams to address vulnerabilities.
- Manage critical and zero-day vulnerability response activities.
- Develop KPIs, dashboards, and executive reports on vulnerability risk and remediation status.
- Support audits, compliance assessments, and cybersecurity governance requirements.
- Lead and mentor the Vulnerability Management team and manage relevant vendors.
Requirements
Bachelor's degree in Cybersecurity, IT, Computer Science, or related field.
8+ years of cybersecurity experience, including 4+ years in Vulnerability Management or Security Operations.
Hands-on experience with Tenable, Qualys, Rapid7, Microsoft Defender, or similar tools.
Strong understanding of vulnerability management, risk management, cloud security, and patch management.
Preferred certifications: CISSP, CISM, CRISC, or GIAC.
As published by workable
First name, Last name, Email, Phone, Highest Education Level, Gender, Do you, or any immediate family member or close personal associate, have any actual, potential, or perceived conflict of interest in relation to QIC, arising from personal relationships, financial interests, or external employment, business activities, or services, that could reasonably be perceived as influencing your independence, objectivity, or decision-making if employed by QIC?, Are you currently or have you ever worked directly for PIF or one of its affiliated companies?, Current Location, Date of Birth, Expected Salary, Current monthly salary, Nationality Field, Resume, Years of relevant experience, Are you currently involved or working directly for Qiddiya either through a delivery partner or as a consultant?, By proceeding, I acknowledge that I have read the Privacy Notice https://qiddiya.com/en/careers/career-privacy-notice/ and consent to the use of my personal data provided in my job application for the purpose of conducting the recruitment process with Qiddiya Investment Company. I confirm that all information submitted as part of my job application is complete, accurate, and true to the best of my knowledge. I understand that providing false, misleading, or incomplete information at any stage of the application or profile creation process may result in the rejection of my application. I further acknowledge and agree that Qiddiya Investment Company may verify the information I have provided, either directly or through authorized third parties., I hereby confirm that I have never had any criminal conviction, an arrest or charge for which I am currently on or awaiting trial