YOUR TASKS 

• Responsibility for the conception, further development and coordinating support of the vulnerability management process, including collaboration with participating service providers and partners.
• Development and implementation of strategies, standards and methods for risk-based identification, assessment and treatment of vulnerabilities in IT.
• Conceptualization of a comprehensive vulnerability detection system through the definition and further development of scan coverage, asset transparency, and continuous optimization of the tools used.
• Analysis, evaluation and prioritization of vulnerabilities and security events based on CVSS, KEV and EPSS ratings as well as current threat landscapes
• Coordination and follow-up of remediation measures together with IT operations, specialist departments and external partners, as well as transparent communication of critical risks.
• Creation of key performance indicators, management reports and decision-making tools for assessing the vulnerability, risk and patch situation.
• Evaluation and introduction of innovative technologies and AI-supported methods for the further development of vulnerability analysis, prioritization and security monitoring

 YOUR PROFILE 

• Successfully completed studies in computer science, business informatics or a comparable qualification, for example through several years of professional experience in the field of IT security or cybersecurity.
• Several years of experience in vulnerability management, IT security management, or a comparable cybersecurity function
• Good knowledge of modern vulnerability management processes, vulnerability analyses, and established security tools and platforms.
• Experience in the conception and further development of security processes as well as in the coordination of complex implementation measures
• Good knowledge of relevant standards and frameworks (e.g. ISO 27001, NIST CSF, BSI Basic Protection)
• Reliable ability to assess technical risks, derive recommendations for action, and communicate effectively with the target audience.
• Independent, responsible and structured work style with a focus on practical and sustainable solutions
• 
  

 YOUR TASKS 

• Responsibility for the conception, further development and coordinating support of the vulnerability management process, including collaboration with participating service providers and partners.
• Development and implementation of strategies, standards and methods for risk-based identification, assessment and treatment of vulnerabilities in IT.
• Conceptualization of a comprehensive vulnerability detection system through the definition and further development of scan coverage, asset transparency, and continuous optimization of the tools used.
• Analysis, evaluation and prioritization of vulnerabilities and security events based on CVSS, KEV and EPSS ratings as well as current threat landscapes
• Coordination and follow-up of remediation measures together with IT operations, specialist departments and external partners, as well as transparent communication of critical risks.
• Creation of key performance indicators, management reports and decision-making tools for assessing the vulnerability, risk and patch situation.
• Evaluation and introduction of innovative technologies and AI-supported methods for the further development of vulnerability analysis, prioritization and security monitoring

 YOUR PROFILE 

• Successfully completed studies in computer science, business informatics or a comparable qualification, for example through several years of professional experience in the field of IT security or cybersecurity.
• Several years of experience in vulnerability management, IT security management, or a comparable cybersecurity function
• Good knowledge of modern vulnerability management processes, vulnerability analyses, and established security tools and platforms.
• Experience in the conception and further development of security processes as well as in the coordination of complex implementation measures
• Good knowledge of relevant standards and frameworks (e.g. ISO 27001, NIST CSF, BSI Basic Protection)
• Reliable ability to assess technical risks, derive recommendations for action, and communicate effectively with the target audience.
• Independent, responsible and structured work style with a focus on practical and sustainable solutions
•