Vulnerability Management (VM) Specialist

About the Position

Vulnerability Management (VM) Specialist

• REQ-10120365
• 05/10/2026
• Business Control
• Amsterdam, Netherlands
• €5.677 - €9.137
• ING Bank

Apply now

Are you the go-to person for identifying risks and turning challenges into actionable solutions? Do you have a strong passion for Vulnerability Management, combined with a keen understanding of IT Security? If so, we have an exciting opportunity for you!

We’re currently hiring for a Business Control Specialist IV. In this role, you’ll serve as a trusted advisor to internal stakeholders, assisting them with the validation of security design, code, and configuration of assets. You’ll be responsible for managing Vulnerability Management issues as well as translating complex Vulnerability Management risks into clear, actionable guidance that enables our DevOps teams to identify and mitigate risks effectively.

You’ll operate as a First Line of Defence (1LoD) risk specialist, working closely with DevOps professionals, CISO and our 2LoD. Together, we keep ING ahead of the curve in risk management. Join us and help shape the future of IT risk & Security management!

Ready to make an impact and enjoy the journey?

The Team

As a Vulnerability Management Specialist you’ll be part of the IAM & Resilience chapter, which is part of the Reliability, IT Risk & Security (RIRS) Tribe at CTO.

The IAM & Resilience chapter consists of risk & security experts who are supporting the Finance & Risk entity on IAM and Resilience (IAM, IT Resilience, Vulnerability Management & SDR) related Security topics. The IAM & Resilience chapter team, in close collaboration with the Change and Testing chapter and the DevOps teams focuses on the day-to-day management and execution of IT risk and security tasks.

Furthermore, the team steers the execution of the Risk Opinion and First Line Monitoring improvement activities that coincide with the execution of IT security controls. The members are typically experienced, they have diverse interdisciplinary technical, IT risk and/or IT security backgrounds.

Responsibilities

• Perform validation/triage, risk scoring, remediation tracking, and verification.
• Use CVSS, threat intel (exploitation in the wild), asset criticality, exposure, and compensating controls to drive risk-based remediation.
• Orchestration Remediation: Taking sessions, coordinate owners, and ensure fix validation (patch, config, version upgrade, or mitigation).
• Continuous improvement: Reduce noise (false positives/duplicates), tune scans, improve coverage, and drive automation.
• Monitor the risk score of Finance & Risk and support the entity to be within Risk Appetite.
• Participate in the Risk Opinion process for Vulnerability Management, ensuring a correct and complete assessment of Vulnerability Management metrics and controls.
• Review Vulnerability Management risk metrics and manage the remediation of issues resulting from the metrics.

Requirements

• Strong knowledge of the end to end Vulnerability Management process.
• Expertise in vulnerability identification, analysis and remediation.
• Knowledge of and experience with common scanning and management tools (e.g. Nessus, Qualys, Tenable, Rapid7) and CVSS classification.
• Experience with Vulnerability Management risk metrics and risk governance frameworks.
• Familiarity with Vulnerability Management processes in complex, regulated environments.
• Excellent stakeholder management and communication skills.
• Certifications such as CISSP, OSCP, GCIH or similar are an advantage, but not a strict requirement.
• Natural motivation and drive to take end-to-end ownership.

We Offer

• 25-28 vacation days depending on contract
• Pension scheme
• 13th month salary
• 8% Holiday payment
• Hybrid working
• Personal growth and challenging work with endless possibilities
• An informal working environment with innovative colleagues

About the Company

Curious about how ING empowers people and businesses to move forward?

Discover what we do and what we can offer you.

Questions? Please visit our Frequently Asked Questions section to find some answers on questions you might have.

Contact the recruiter attached to the advertisement. Want to apply directly? Please upload your CV and motivation letter by clicking the ‘Apply’ button.

We do require a personal motivation for this role so make sure to include this in your application.

Diversity, Inclusion, and Belonging

ING’s vision is to unlock our people’s full potential through our inclusive culture where everyone has the opportunity to develop and have impact for our customers and society. To achieve this vision, our policies support diversity, equity, and inclusion. As an equal opportunity employer, we do not tolerate discrimination of any kind with regard to age, gender, gender identity, cultural background, experience, religion, race, ethnicity, disability, family responsibilities, sexual orientation, social origin, or any other status protected by applicable law. If you require any assistance or if we can accommodate you in any way when participating in our application and/or interview process, please email the recruiting contact listed for the relevant position. We will be happy to work with you to ensure a fair and accessible process. Read more about our commitment to diversity, inclusion and belonging here.