Vulnerability Management Lead

About the role

We are seeking a Vulnerability Management Lead to own the end‑to‑end vulnerability lifecycle at our IT Management premises in Bahrain. You will act as the central authority for vulnerability operations, ensuring timely discovery, classification, remediation, and executive reporting.

Key responsibilities

• Manage the full vulnerability management lifecycle: discovery, scanning, triage, prioritisation, remediation tracking, validation and reporting.
• Administer Qualys VMDR dashboards and reporting tools provided by IT Management.
• Classify patches by risk level (Emergency, Critical, High, Medium, Low) and prioritise based on CVSS, exploitability, asset criticality and business impact.
• Coordinate remediation actions with offshore patch engineering and internal IT teams, including configuration recommendations and compensating controls.
• Track closure, ageing, exceptions, risk acceptance and remediation blockers using the agreed tracking solution.
• Validate patch deployments on servers and endpoints through operational checks.
• Produce weekly and monthly technical and management reports on vulnerability posture, patch compliance and AV status.
• Support audits, compliance reviews and continuous‑improvement initiatives.

Required profile

• Bachelor’s degree in Computer Science, Information Security or a related field.
• 7+ years of experience in vulnerability management, IT security or infrastructure security.
• Hands‑on experience with Qualys VMDR or an equivalent platform.
• Strong knowledge of CVSS scoring, exploitability analysis and risk‑based prioritisation.
• Proven ability to govern remediation in regulated environments.
• Excellent communication skills for technical and executive audiences.

Required skills

• Qualys VMDR / Vulnerability Reporting
• Vulnerability Management Lifecycle
• CVSS and Risk‑Based Prioritisation
• Windows and Linux Security
• Patch Compliance Reporting
• Threat and Exploitability Awareness
• Risk Acceptance and Exception Tracking
• Audit and Compliance Support