IT Security Vulnerability Management Specialist

About the role

We are seeking an IT Security Vulnerability Management Specialist to join our Shared Service Center in New Belgrade. Reporting to the Global Manager IT Security Operations, you will lead the full vulnerability management lifecycle across both IT and OT environments, ensuring continuous security improvement.

Key responsibilities

• Lead end‑to‑end vulnerability management processes, including scanning, identification, triage, and reporting.
• Coordinate with infrastructure, cloud, and application teams to remediate vulnerabilities based on risk and established SLAs.
• Maintain and fine‑tune vulnerability scanning tools for accurate detection and comprehensive coverage.
• Integrate threat intelligence feeds (CISA KEV, NVD, vendor advisories) into prioritisation models.
• Ensure alignment with security policies, ISO/IEC 27001, NIST 800‑53, and relevant regulatory requirements.

Required profile

• Bachelor's or master's degree in IT, engineering, or related field, or equivalent experience.
• Minimum 3 years of cybersecurity experience, with at least 1 year focused on vulnerability management or threat/risk analysis.
• Proven ability to manage complex remediation across hybrid environments (on‑prem, cloud, containers).
• Relevant certifications such as OSCP, GCIH, GCFA, or similar are a plus.

Required skills

• Enterprise vulnerability scanning tools (e.g., Tenable.sc, Qualys).
• Ticketing systems for remediation workflow.
• Deep knowledge of CVEs, CVSS scoring, MITRE ATT&CK framework, and threat modelling.
• Experience with threat intelligence feeds like CISA KEV and NVD.