# Vulnerability Management Lead

**Company**: IQVIA
**Location**: Porto Salvo
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Healthcare

**Apply**: https://iqvia.wd1.myworkdayjobs.com/en-US/IQVIA/job/Porto-Salvo-Portugal/Sr-Cybersecurity-Analyst_R1571727-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_506eb652-190

## Description

We are seeking an experienced Vulnerability Management Lead to oversee our Vulnerability Management, Attack Surface Management, Continuous Threat Exposure Management (CTEM), and Penetration Testing capabilities.

The successful candidate will provide subject matter expertise and leadership to analysts, manage the operation of vulnerability management capabilities, and correlate threat intelligence with internal and external exposure data to prioritize remediation.

Responsibilities:

- Manage the operation of Vulnerability Management, External Attack Surface Management, and CTEM capabilities

- Provide leadership and direction to analysts within the area of responsibility

- Oversee the development and implementation of functional governance

- Act as controller of the penetration testing program

- Correlate threat intelligence with internal and external exposure data to prioritize remediation

- Provide regular performance updates and exposure risk reporting to Senior Leadership

Qualifications:

- Bachelor's Degree in Computer Science, a related field, or equivalent experience

- 5 years of related work experience, including 3 years in vulnerability or exposure management

- Fluent English, written and spoken

- Hands-on experience with Vulnerability Management, External Attack Surface Management, Exposure Management, Threat Intelligence Platforms, Cloud Security Posture Management, Breach and Attack Simulation, and IT Service Management

- Strong knowledge of CVSS, EPSS, known-exploited vulnerability catalogs, MITRE ATT&CK, and OWASP Top 10

- Working knowledge of at least one major public cloud provider, networking, Windows, and Linux

- Scripting or API automation (Python, PowerShell) and data reporting/BI tools

- CISSP, CISM, and CRISC certifications required

Benefits:

- Competitive salary

- Opportunity to work with a leading global provider of clinical research services, commercial insights, and healthcare intelligence

- Culture of belonging and diversity, inclusion, and empowerment

## Skills

### Required
- Vulnerability Management
- External Attack Surface Management
- Continuous Threat Exposure Management
- Penetration Testing
- Threat Intelligence
- Cloud Security Posture Management
- Breach and Attack Simulation
- IT Service Management
- CVSS
- EPSS
- MITRE ATT&CK
- OWASP Top 10
- Public Cloud
- Networking
- Windows
- Linux
- Python
- PowerShell
- CISSP
- CISM
- CRISC

### Nice to have
- Scripting
- API automation
- Data reporting/BI tools
- GIAC
- OSCP
- CompTIA PenTest+
- Cloud security certification

---

Source: [Apply at iqvia.wd1.myworkdayjobs.com](https://iqvia.wd1.myworkdayjobs.com/en-US/IQVIA/job/Porto-Salvo-Portugal/Sr-Cybersecurity-Analyst_R1571727-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)