Vulnerability & Patch Management (Associate) Manager

About the role

Sia is seeking an experienced Associate Manager to lead the end‑to‑end vulnerability lifecycle across cloud environments, primarily Google Cloud Platform and AWS. The role combines technical expertise with stakeholder coordination to ensure timely remediation while maintaining high‑availability trading operations.

Key responsibilities

• Operate and optimise the vulnerability and patch management platform for scanning, asset discovery and exposure management.
• Prioritise vulnerabilities using Tenable One analytics and exposure scoring.
• Design, coordinate and oversee patch management processes, balancing security and availability.
• Track remediation SLAs, report risk exposure and drive closure with system and application owners.
• Collaborate with infrastructure, DevOps and cloud teams to embed security into deployment workflows.
• Maintain awareness of emerging threats, CVEs and exploit trends, translating them into actionable remediation plans.
• Support audits and contribute to continuous improvement of security policies and standards.

Required profile

• 6–10 years of cybersecurity experience with a focus on vulnerability and patch management.
• Hands‑on expertise with Tenable One (or Tenable.io / Tenable.sc / Nessus) and willingness to transition.
• Strong understanding of Windows and Linux operating systems, networking and common attack vectors.
• Fluent communication and presentation skills in English and French.
• Nice‑to‑have: ISO 27001 certification, Google Cloud Platform security certifications, experience in regulated high‑availability sectors.

Required skills

• Tenable One (or Tenable.io, Tenable.sc, Nessus)
• Windows operating system
• Linux operating system
• Networking fundamentals
• Google Cloud Platform (GCP)
• Amazon Web Services (AWS)