Assistant Manager - Vulnerability Management

About the role

Red Sea Global is seeking an Assistant Manager to lead the end‑to‑end vulnerability management lifecycle across its systems, networks, applications, and cloud assets. You will ensure continuous exposure visibility and drive timely remediation to protect critical business operations.

Key responsibilities

• Maintain an up‑to‑date inventory of on‑premises, cloud, mobile, and OT assets, linking exposures to asset criticality and business risk.
• Plan and execute continuous vulnerability scanning, configuration assessments, and misconfiguration detection across the digital infrastructure.
• Prioritize vulnerabilities using risk‑based frameworks that incorporate asset criticality, threat intelligence, and exploit likelihood.
• Coordinate with infrastructure, application, and cloud owners to guide patching, configuration changes, and compensating controls.
• Track remediation progress through structured retesting cycles and ensure closure of findings within defined SLAs.
• Produce regular vulnerability status reports and dashboards for senior stakeholders.
• Maintain and improve vulnerability management policies, processes, tool configurations, and governance documentation.
• Support integration of vulnerability controls into DevOps/CI‑CD pipelines and automate workflows using scripting and orchestration tools.

Required profile

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or a related field.
• Preferred certifications: Certified Ethical Hacker (CEH), CompTIA Security+, GIAC Vulnerability Assessment Analyst (GEVA).

Required skills

• Asset discovery and inventory management
• Vulnerability scanning tool operation
• Risk‑based vulnerability prioritization
• Patch management coordination and remediation tracking
• Automation of vulnerability management workflows
• Vulnerability metrics reporting and dashboard creation
• Cloud vulnerability management
• Secure DevOps / CI‑CD vulnerability integration
• OT and industrial control systems security