Senior Lead- Vulnerability Management

Role Overview

Senior Lead, Vulnerability Management at Qiddiya Investment Company.

Role Purpose

Lead the organization's Vulnerability Management program and strategy, overseeing the full vulnerability lifecycle from scanning and assessment through prioritization, remediation, and governance while mentoring the team and managing critical security incidents.

Key Responsibilities

Strategy & Program Leadership

• Lead the organization's Vulnerability Management program and strategy.
• Develop KPIs, dashboards, and executive reports on vulnerability risk and remediation status.

Operations & Remediation

• Oversee vulnerability scanning, assessment, prioritization, and remediation activities.
• Monitor remediation progress and enforce agreed SLAs.
• Manage critical and zero-day vulnerability response activities.

Coordination & Stakeholder Management

• Coordinate with IT, Cloud, Infrastructure, Application, and Security teams to address vulnerabilities.

Governance & Compliance

• Support audits, compliance assessments, and cybersecurity governance requirements.

Team & Vendor Management

• Lead and mentor the Vulnerability Management team.
• Manage relevant vendors.

Qualifications & Experience

• Bachelor's degree in Cybersecurity, IT, Computer Science, or related field.
• 8+ years of cybersecurity experience.
• 4+ years in Vulnerability Management or Security Operations.

Skills & Competencies

• Hands-on experience with Tenable, Qualys, Rapid7, Microsoft Defender, or similar tools.
• Strong understanding of vulnerability management.
• Strong understanding of risk management.
• Strong understanding of cloud security.
• Strong understanding of patch management.

Additional Information

• Preferred certifications: CISSP, CISM, CRISC, or GIAC.