**Role Purpose** Owns and leads the unified vulnerability and patch management service across all organizational assets. Responsible for end\-to\-end delivery, governance, reporting, and KPI compliance in line with defined risk\-management and regulatory frameworks. **Key Responsibilities** * Lead vulnerability lifecycle management using Qualys VMDR integrated with ServiceNow. \* * Oversee asset discovery, scanning, prioritization, and remediation across servers, endpoints, and applications. \* * Define and enforce patching strategy, ensuring CVSS\-based remediation within SLA thresholds (7 / 14 / 30\-day windows). \* * Supervise manual patching of production systems, validate rollback plans, and coordinate maintenance windows. \* * Generate weekly and monthly KPI dashboards, tracking open vulnerabilities, SLA compliance, and risk scores. \* * Align with compliance standards — ISO 27001, NIST 800\-40, CIS v8, PCI DSS — and prepare audit\-ready evidence. \* * Mentor and train the junior team on vulnerability analysis, patch deployment, and incident response. \* * Coordinate escalations, change control, and documentation with Information Security and IT Governance teams. \* * Contribute to continuous\-improvement initiatives and regulatory reporting. **Qualifications \& Skills** * Bachelor’s degree in Cybersecurity, Computer Science, or related field. \* * 5\+ years’ experience in vulnerability management and patch operations. \* * Proven expertise with Qualys, ServiceNow, and enterprise patch\-management tools (SCCM, Ansible, WSUS). \* * Strong knowledge of CVSS scoring, threat intelligence correlation, and risk prioritization. \* * Familiarity with ITIL change / incident processes. \* * Certifications preferred: CISSP, CISM, CRISC, CompTIA Security\+, or Qualys VMDR Specialist. \* * Strong leadership, documentation, and stakeholder\-communication skills. Job Types: Full\-time, Contract Contract length: 12 months Pay: BD1,200\.000 \- BD2,000\.000 per month