Business Architect Vulnerability Management im Team Cloud & Security (m/f/d)

The focus is on building and developing modern vulnerability management programs for customers from regulated industries. The focus is on a risk- and business-oriented prioritization instead of a purely technical vulnerability assessment. You connect VM processes with SOC, SIEM, Cloud and ITSM landscapes and enable integrated security architectures. At the same time, you support banks and insurance companies in implementing regulatory requirements such as DORA, BAIT, VAIT, ISO 27001 and NIS2. This way you combine technical security expertise with strategic customer advice. Advise: With your know-how, you advise on the development and development of vulnerability management programs in the financial and insurance industry.

Develop: The focus is on the development of target architectures and governance models for effective vulnerability management.

Analyze: You are structuring assessments and ripeness analysis in complex enterprise landscapes and deriving concrete fields of action for architecture and control. Integrated: One focus is on the integration of vulnerability management processes into existing SOC, SIEM and ITSM structures.

Edit: You also develop KPIs, reporting and risk priority models for management and revision.

Translating: You translate regulatory requirements such as DORA, ISO 27001 and NIS2 into scalable governance and architecture principles for regulated organisations. In addition, you actively participate in presales, offering and customer development activities.

Designs: Your area of responsibility is rounded off by creating security strategies for regulated financial companies.

Experience: at least 5 years in vulnerability management, security operations or comparable architecture and governance roles Industry knowledge: in the banking, insurance or strongly regulated enterprise environment Understanding: for enterprise vulnerability management processes and their embedding in SOC, SIEM and ITSM landscapes Platform knowledge: in dealing with common vulnerability management and security tools (e.g. Tenable, Qualys, Rapid7, Wiz or Microsoft Defender) in the context of architecture and operating models Competence: in risk analysis as well as in structured prioritization of vulnerabilities based on business impact Language competence: very good German and English skills in C1 level Mobility: readiness for customer projects Your personality: Consistent: You think in contexts rather than in individual problems and prioritise risks with a view to business impact and architectural goals.

Clear: Your exchange with customers, management and technical teams is precise, safe and at eye level – even in complex stakeholder structures.

Structured: Your approach is architecture-driven rather than operational, focusing on sustainable target images and scalable solutions.

Work & Flexibility: Remote, hybrid or office – with flexible times. We rely on trust.

Flexible & Funded: Every month money for extras: e.g. Jobrad, Germanyticket, EGYM-Wellpass or asset-effective services – and more.

Free space & leisure: 30 holidays, Christmas and New Year's Eve free. Also possible: Workation and Sabbatical.

Health & Assurance: Occupational pension (bAV) and an occupational health insurance (bKV) for additional health benefits and more safety in everyday life.

.