Vulnerability Management Service Delivery Manager

We are looking for Vulnerability Management Service Delivery Manager to join one of our clients in Bahrain to lead the end-to-end delivery and operation of the managed Vulnerability Management and Patching Service, ensuring effective vulnerability identification, risk-based remediation, service governance, compliance reporting, stakeholder management, and continuous improvement. The role is responsible for overseeing Qualys-based vulnerability management activities, patching operations, service performance, reporting, and alignment with customer security and operational objectives. Key Responsibilities Vulnerability Management Operations • Lead vulnerability management operations utilizing Qualys for asset discovery, vulnerability assessment, risk scoring, and reporting. • Ensure vulnerability scans are executed according to approved schedules and coverage requirements. • Oversee vulnerability prioritization based on CVSS scores, exploitability, threat intelligence, business criticality, and risk exposure. • Govern remediation activities across infrastructure, operating systems, databases, middleware, and applications. • Track vulnerability aging, remediation progress, SLA compliance, and risk reduction metrics. • Ensure accurate vulnerability classification, asset categorization, and reporting integrity. • Coordinate validation and closure of remediated vulnerabilities. Patching & Remediation Management • Govern enterprise patch management activities across Windows, Linux, and third-party application environments. • Coordinate patch deployment schedules, maintenance windows, change approvals, testing, and production implementation. • Collaborate with infrastructure, application, and security teams to ensure timely remediation of identified vulnerabilities. • Ensure patching activities comply with customer change management and operational procedures. Service Delivery & Governance • Own and manage the overall delivery of the vulnerability management and patching service across all in-scope assets and environments. • Establish and govern operational processes, service reviews, reporting cycles, remediation tracking, and change management activities. • Monitor and report service performance against agreed KPIs, SLAs, and remediation targets. • Lead weekly operational reviews, monthly governance meetings, and executive-level service reporting. • Ensure compliance with audit, regulatory, and customer governance requirements. • Manage escalations, service risks, and critical incidents related to vulnerability and patch management activities. • Drive continual service improvement initiatives to enhance operational efficiency and security posture. Stakeholder & Risk Management • Act as the primary point of contact for customer management, Information Security, Infrastructure, and Operations teams. • Provide executive-level reporting on cyber risk posture, remediation progress, and service performance. • Support risk assessments, audit requests, compliance reviews, and security governance activities. • Lead cross-functional coordination during critical cybersecurity incidents and remediation efforts. Qualifications & Experience • Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related field. • Minimum 8 years of experience in cybersecurity operations, IT service delivery, managed services, vulnerability management, or infrastructure operations. • Minimum 3 years in a leadership role managing vulnerability management, patch management, cybersecurity operations, or enterprise service delivery functions. • Hands-on experience with Qualys in enterprise-scale environments. • Experience within highly regulated sectors such as banking, financial services, or critical infrastructure is highly desirable. Required Skills • Strong expertise in vulnerability management lifecycle, risk assessment, remediation governance, and security operations. • Advanced knowledge of Qualys Vulnerability Management, Asset Discovery, and reporting capabilities. • Strong understanding of enterprise patch management processes across Windows, Linux, and third-party platforms. • Working knowledge of ServiceNow, ITIL processes, change management, incident management, and service governance frameworks. • Strong leadership, stakeholder management, escalation handling, and executive communication skills. • Excellent analytical, reporting, planning, and coordination capabilities. • Ability to lead cross-functional technical and operational teams in complex enterprise environments. Preferred Certifications • PMP or PRINCE2 • ITIL Foundation or ITIL 4 • Qualys Certified Specialist / Qualys VMDR Certifications • CISSP • Security+ • CEH

Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related field. Minimum 8 years of experience in cybersecurity operations, IT service delivery, managed services, vulnerability management, or infrastructure operations. Minimum 3 years in a leadership role managing vulnerability management, patch management, cybersecurity operations, or enterprise service delivery functions. Hands-on experience with Qualys in enterprise-scale environments. Experience within highly regulated sectors such as banking, financial services, or critical infrastructure is highly desirable.

Vulnerability Management Operations: Lead vulnerability management operations utilizing Qualys for asset discovery, vulnerability assessment, risk scoring, and reporting. Ensure vulnerability scans are executed according to approved schedules and coverage requirements. Oversee vulnerability prioritization based on CVSS scores, exploitability, threat intelligence, business criticality, and risk exposure. Govern remediation activities across infrastructure, operating systems, databases, middleware, and applications. Track vulnerability aging, remediation progress, SLA compliance, and risk reduction metrics. Ensure accurate vulnerability classification, asset categorization, and reporting integrity. Coordinate validation and closure of remediated vulnerabilities. Patching & Remediation Management: Govern enterprise patch management activities across Windows, Linux, and third-party application environments. Coordinate patch deployment schedules, maintenance Windows, change approvals, testing, and production implementation. Collaborate with infrastructure, application, and security teams to ensure timely remediation of identified vulnerabilities. Ensure patching activities comply with customer change management and operational procedures. Service Delivery & Governance: Own and manage the overall delivery of the vulnerability management and patching service across all in-scope assets and environments. Establish and govern operational processes, service reviews, reporting cycles, remediation tracking, and change management activities. Monitor and report service performance against agreed KPIs, SLAs, and remediation targets. Lead weekly operational reviews, monthly governance meetings, and executive-level service reporting. Ensure compliance with audit, regulatory, and customer governance requirements. Manage escalations, service risks, and critical incidents related to vulnerability and patch management activities. Drive continual service improvement initiatives to enhance operational efficiency and security posture. Stakeholder & Risk Management: Act as the primary point of contact for customer management, Information Security, Infrastructure, and Operations teams. Provide executive-level reporting on cyber risk posture, remediation progress, and service performance. Support risk assessments, audit requests, compliance reviews, and security governance activities. Lead cross-functional coordination during critical cybersecurity incidents and remediation efforts.