Vulnerability Manager

About the role

You will join a cross‑functional team that partners with IT operations, development, and compliance to keep Deloitte Luxembourg’s systems secure. The role focuses on driving vulnerability remediation initiatives and enabling risk‑based decisions across the organization.

Key responsibilities

• Define and maintain vulnerability and patch management policies, governance, and processes.
• Design and operate vulnerability detection for infrastructure, applications, code, and threat intelligence.
• Set prioritisation criteria (CVSS, asset criticality, exposure) and manage exceptions.
• Coordinate remediation and patching with Infra, Network, Workplace, Apps, and DevOps teams; embed security checks into CI/CD pipelines.
• Promote automation and AI/LLM‑based tools for discovery and remediation.
• Define and publish KPIs and dashboards (time to remediate, patch compliance, open criticals).
• Engage with senior management to align security patching priorities and timelines.

Required profile

• Degree in Computer Science, Information Security or equivalent experience.
• 5‑8+ years in IT/security with strong vulnerability management and patching experience; leadership experience is a plus.
• Solid technical background in operating systems, networks, middleware, databases, cloud and containers.
• Fluent in English and French with strong coordination and risk‑analysis skills.

Required skills

• Vulnerability scanners: Tenable, Qualys, Rapid7.
• Patch management tools: SCCM, Intune, Ansible.
• AppSec tools: SAST, SCA, DAST, IaC.
• AI/LLM‑based AppSec platforms and DevSecOps practices.
• Security frameworks: NIST, ISO 27001, CIS Controls.
• Risk scoring: CVSS.

What we offer

• Clear career progression with top‑notch training.
• Opportunities to work on international projects while making a local impact.
• Access to cutting‑edge technologies and tools.
• Inclusive, flexible culture with flexible working hours.