Vulnerability Management Service Delivery Manager

About the role

A client in Bahrain is looking for a Vulnerability Management Service Delivery Manager to lead the end-to-end delivery and operation of its managed Vulnerability Management and Patching Service. The role covers effective vulnerability identification, risk-based remediation, service governance, compliance reporting, stakeholder management and continuous improvement, including oversight of Qualys-based activities, patching operations, service performance and reporting.

Key responsibilities

• Lead vulnerability management operations using Qualys for asset discovery, vulnerability assessment, risk scoring and reporting, ensuring scans run on approved schedules and coverage requirements.
• Oversee prioritization by CVSS score, exploitability, threat intelligence, business criticality and risk exposure; track aging, remediation progress, SLA compliance and risk reduction.
• Govern remediation across infrastructure, operating systems, databases, middleware and applications, and coordinate validation and closure of remediated vulnerabilities.
• Manage enterprise patching across Windows, Linux and third-party applications, coordinating schedules, maintenance windows, change approvals, testing and production implementation.
• Own the overall delivery of the service, set up operational processes, service reviews, reporting cycles and change management, and monitor performance against KPIs, SLAs and remediation targets.
• Lead weekly operational reviews, monthly governance meetings and executive reporting, and ensure compliance with audit, regulatory and customer governance requirements.
• Manage escalations, service risks and critical incidents, drive continual service improvement, and act as main contact for customer, Information Security, Infrastructure and Operations teams.
• Support risk assessments, audits, compliance reviews and security governance, and lead cross-functional coordination during critical cybersecurity incidents.

Required profile

• Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering or a related field.
• Minimum 8 years in cybersecurity operations, IT service delivery, managed services, vulnerability management or infrastructure operations.
• Minimum 3 years in a leadership role managing vulnerability management, patch management, cybersecurity operations or enterprise service delivery.
• Hands-on experience with Qualys in enterprise-scale environments.
• Experience in highly regulated sectors such as banking, financial services or critical infrastructure is highly desirable.

Required skills

• Vulnerability management lifecycle, risk assessment, remediation governance and security operations.
• Advanced knowledge of Qualys Vulnerability Management, Asset Discovery and reporting.
• Enterprise patch management across Windows, Linux and third-party platforms.
• Working knowledge of ServiceNow, ITIL, change management, incident management and service governance.
• Preferred certifications: PMP or PRINCE2, ITIL Foundation or ITIL 4, Qualys Certified Specialist / VMDR, CISSP, Security+, CEH.