We are looking for Vulnerability Management Service Delivery Manager to join one of our clients in Bahrain to lead the end-to-end delivery and operation of the managed Vulnerability Management and Patching Service, ensuring effective vulnerability identification, risk-based remediation, service governance, compliance reporting, stakeholder management, and continuous improvement. The role is responsible for overseeing Qualys-based vulnerability management activities, patching operations, service performance, reporting, and alignment with customer security and operational objectives.
Key Responsibilities
Vulnerability Management Operations
- Lead vulnerability management operations utilizing Qualys for asset discovery, vulnerability assessment, risk scoring, and reporting.
- Ensure vulnerability scans are executed according to approved schedules and coverage requirements.
- Oversee vulnerability prioritization based on CVSS scores, exploitability, threat intelligence, business criticality, and risk exposure.
- Govern remediation activities across infrastructure, operating systems, databases, middleware, and applications.
- Track vulnerability aging, remediation progress, SLA compliance, and risk reduction metrics.
- Ensure accurate vulnerability classification, asset categorization, and reporting integrity.
- Coordinate validation and closure of remediated vulnerabilities.
Patching & Remediation Management
- Govern enterprise patch management activities across Windows, Linux, and third-party application environments.
- Coordinate patch deployment schedules, maintenance windows, change approvals, testing, and production implementation.
- Collaborate with infrastructure, application, and security teams to ensure timely remediation of identified vulnerabilities.
- Ensure patching activities comply with customer change management and operational procedures.
Service Delivery & Governance
- Own and manage the overall delivery of the vulnerability management and patching service across all in-scope assets and environments.
- Establish and govern operational processes, service reviews, reporting cycles, remediation tracking, and change management activities.
- Monitor and report service performance against agreed KPIs, SLAs, and remediation targets.
- Lead weekly operational reviews, monthly governance meetings, and executive-level service reporting.
- Ensure compliance with audit, regulatory, and customer governance requirements.
- Manage escalations, service risks, and critical incidents related to vulnerability and patch management activities.
- Drive continual service improvement initiatives to enhance operational efficiency and security posture.
Stakeholder & Risk Management
- Act as the primary point of contact for customer management, Information Security, Infrastructure, and Operations teams.
- Provide executive-level reporting on cyber risk posture, remediation progress, and service performance.
- Support risk assessments, audit requests, compliance reviews, and security governance activities.
- Lead cross-functional coordination during critical cybersecurity incidents and remediation efforts.
Qualifications & Experience
- Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related field.
- Minimum 8 years of experience in cybersecurity operations, IT service delivery, managed services, vulnerability management, or infrastructure operations.
- Minimum 3 years in a leadership role managing vulnerability management, patch management, cybersecurity operations, or enterprise service delivery functions.
- Hands-on experience with Qualys in enterprise-scale environments.
- Experience within highly regulated sectors such as banking, financial services, or critical infrastructure is highly desirable.
Required Skills
- Strong expertise in vulnerability management lifecycle, risk assessment, remediation governance, and security operations.
- Advanced knowledge of Qualys Vulnerability Management, Asset Discovery, and reporting capabilities.
- Strong understanding of enterprise patch management processes across Windows, Linux, and third-party platforms.
- Working knowledge of ServiceNow, ITIL processes, change management, incident management, and service governance frameworks.
- Strong leadership, stakeholder management, escalation handling, and executive communication skills.
- Excellent analytical, reporting, planning, and coordination capabilities.
- Ability to lead cross-functional technical and operational teams in complex enterprise environments.
Preferred Certifications
- PMP or PRINCE2
- ITIL Foundation or ITIL 4
- Qualys Certified Specialist / Qualys VMDR Certifications
- CISSP
- Security+
- CEH
