IT Threat and Vulnerability Manager

About the role

Deloitte is looking for an experienced IT Threat and Vulnerability Manager to lead its Vulnerability Management Services (VMS) team in Madrid. You will shape the vulnerability management program, align it with emerging threat trends, and drive risk reduction across the organization.

Key responsibilities

• Develop and mature a vulnerability management strategy that reflects industry threat evolution.
• Lead a team of cybersecurity analysts, fostering collaboration and innovation.
• Assess, validate, and triage vulnerabilities, working with asset owners to ensure timely remediation or approved exceptions.
• Coordinate cadence calls with member firms to track risk‑reduction progress, validate IP ranges, and manage open tickets.
• Oversee ServiceNow ticket handling to meet SLA commitments.
• Maintain and annually update team documentation, run‑books, and training requirements.
• Provide regular status reports to senior management on remediation progress and critical vulnerabilities.
• Conduct security vulnerability scanning across networks, operating systems, applications, databases, and other components.

Required profile

• 7+ years of experience in vulnerability management or compliance monitoring.
• Proven leadership experience in a cybersecurity environment.
• Strong knowledge of information security best practices.
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Professional proficiency in English, both written and spoken.

Required skills

• Hands‑on experience with vulnerability management tools such as Qualys, Nessus, Nexpose, and Rapid7.
• Experience using ServiceNow for ticket management.
• Ability to scan for vulnerabilities, prioritize them by severity, and drive remediation.

What we offer

• High‑impact projects with long‑term growth and continuous learning opportunities.
• Hybrid and flexible working model with a healthy balance between remote work and office collaboration.
• Positive, collaborative environment with team‑building, cultural, and sports events.
• Holistic wellbeing programs covering physical, mental, and financial health.
• Opportunities for social impact through volunteering and pro‑bono initiatives.