Vulnerability & Patch Management (Associate) Manager

About the role

Sia, a global management consulting group founded in 1999, is looking for an experienced Vulnerability & Patch Management (Associate) Manager in Luxembourg. The role owns the end-to-end vulnerability lifecycle, from discovery and prioritization to remediation and verification, primarily on cloud environments (GCP first, then AWS).

Key responsibilities

• Operate and optimize the Vulnerability & Patch platform for scanning, asset discovery and exposure management across the enterprise.
• Lead risk-based prioritization of vulnerabilities using Tenable One analytics and exposure scoring.
• Design, coordinate and oversee patch management, balancing security needs with the availability requirements of a high-uptime trading environment.
• Track remediation SLAs, report on risk exposure and drive timely closure with system and application owners.
• Work with infrastructure, DevOps and cloud teams to embed security into deployment and maintenance workflows.
• Keep up with emerging threats, CVEs and exploit trends and turn them into remediation plans.
• Support audits and contribute to continuous improvement of security policies and standards.

Required profile

• 6-10 years of experience in cybersecurity, with a strong focus on vulnerability and patch management.
• Strong analytical, prioritization and stakeholder-communication skills.
• English and French communication and presentation skills.
• Nice to have: ISO 27001 knowledge or certification, Google Cloud Platform certifications, and experience in critical infrastructure, energy or other highly regulated, high-availability sectors.

Required skills

• Hands-on expertise with Tenable One (or strong Tenable.io / Tenable.sc / Nessus experience with willingness to transition).
• Solid understanding of Windows and Linux, networking and common attack vectors.

The company states it cannot provide a work permit for this position and is an equal opportunity employer.