Vulnerability Manager F/H

Job Description

The Vulnerability Manager is responsible for identifying, assessing, and managing vulnerabilities across the organization. He will be attached and supporting the security operation service lead.

The Vulnerability Manager plays a crucial role in safeguarding the organization’s digital assets by identifying, assessing, and managing vulnerabilities. 

This includes:

• ensuring that the organization’s vulnerability management strategies are aligned with business objectives and regulatory requirements.
• collaborating with various departments, including IT, business units, and security teams across the organization, to ensure that vulnerabilities are effectively mitigated and managed.
• continuously monitor and improve vulnerability management practices in response to the evolving cyber threat landscape.

Responsibilities:

Coordination & Leadership:

• Lead and coordinate vulnerability management activities across the organization.
• Implement necessary actions to ensure that the organization meets its security objectives.
• Collaborate with cross-functional and local teams to ensure cohesive efforts.
• Engage with Business Owners, IT, architects, and Operational Security teams.
• Hold meetings and manage key stakeholders as needed.

Vulnerability Identification & Assessment:

• Leverage the group vulnerability management solutions to identify and evaluate vulnerabilities.
• Conduct regular asset assessments and align group vulnerability management tool with all asset sources.
• Engage with Business Owners, IT, architects, and Operational Security teams to understand and address potential vulnerabilities.
• Perform penetration tests and follow-up on remediation activities.
• Manage the deployment of vulnerability management tools on internal and external perimeters.

Continuous improvement & automation:

• Continuously improve the vulnerability management program.
• Explore automation opportunities to enhance processes
• Maintain the different vulnerability management tools, and data repositories, including run activities on the different tools
• Maintain & improve the script library used to minimize manual activities

Documentation & reporting:

• Maintain comprehensive documentation of vulnerability management tools and activities.
• Develop and monitor KPIs to measure effectiveness.
• Produce regular reports on managed vulnerabilities and KPIs for various committees and senior management.
• Prepare detailed vulnerability assessment reports and present findings
• Ensure comprehensive documentation of vulnerability management activities.
• Produce regular reports on managed vulnerabilities and KPIs for various committees.
• Prepare detailed vulnerability assessment reports and present findings to senior management and stakeholders.

Preferred Experience

Master’s degree in information security or related field, or equivalent work experience.

• 3+ years in similar fields.

• Experience in Information Security control management.

• Knowledge of main security vulnerability frameworks (CVSS, CVE, NIST CSF, CIS Controls, or others).

• Scripting (python, powershell)

• Vulnerability management tools

• Insurance and financial industry experience is a plus.

• Fluent English is a must

• Relationship building and stakeholder management capabilities.

• Excellent written and verbal communication skills

• Strong attention to details

• Strong working knowledge of Microsoft Office

Recruitment Process

1/ HR 

2/ N+1 

3/ Optional : technical test, N+2, culture fit

Additional Information

• Contract Type: Full-Time
• Location: Saint-Denis
• Education Level: Master's Degree
• Experience: > 3 years
• 50% remote

About

With over million customers around the world and 12,000 employees in 37 countries, Europ Assistance is the 2nd global player of assistance services in 3 areas: travel, mobility, and personal care. Founded in 1963, Europ Assistance, the inventor of assistance, supports customers in over 200 countries and territories thanks to our network of 750.000 approved providers.

Our mission is to