Vulnerability Management

Your tasks

We are seeking a seasoned vulnerability management specialist to join our information security team in Riyadh. The successful candidate will lead vulnerability assessment and remediation efforts across our enterprise, leveraging Ivanti patch management, industry-leading scanning tools, and SIEM integration to enhance our security posture and ensure compliance with regulatory standards.

• Develop, implement, and maintain a comprehensive vulnerability management program aligned with industry best practices
• Conduct regular vulnerability scans using tools such as Nessus, Qualys, or Rapid7 and analyze findings
• Manage and optimize patch deployment processes across the organization using Ivanti
• Coordinate with IT and application teams to prioritize and remediate vulnerabilities and verify fixes
• Integrate vulnerability data into the SIEM platform for threat correlation, monitoring, and alerting
• Generate detailed reports and metrics on vulnerability status, trends, and remediation progress for stakeholders
• Perform risk assessments and provide actionable recommendations to senior management
• Ensure compliance with relevant security frameworks and regulatory requirements (e.g., ISO 27001, NIST)
• Stay current on emerging threats, vulnerabilities, and remediation techniques

Requirements

Required qualifications

• 8–10 years of experience in vulnerability management, patch management, or a related cybersecurity role
• Hands-on experience with Ivanti patch management solutions
• Proficient with vulnerability scanning tools such as Nessus, Qualys, or Rapid7
• Strong understanding of patch management processes and best practices
• Experience configuring and analyzing SIEM platforms (e.g., Splunk, IBM QRadar)
• In-depth knowledge of network and application security concepts
• Bachelor’s degree in computer science, information security, or a related field
• Excellent analytical, problem-solving, and attention to detail skills

Preferred qualifications

• Professional certifications such as CISSP, CISM, CEH, or equivalent
• Experience with scripting languages (e.g., PowerShell, Python) for automation
• Familiarity with regulatory frameworks including ISO 27001, NIST, and PCI DSS
• Strong communication and stakeholder management skills
• Fluency in Arabic and English
• Experience working in cloud or hybrid environments
• Project management experience in security initiatives

Other

Position details *Location: Riyadh, Saudi Arabia Industry: Information Technology (IT) / Software Experience required:** 8+ years