Cybersecurity - Vulnerability Management; VMS; German Speaker GDS Hybrid

Vulnerability Management Specialist (VMS) - German Speaker - EY GDS Spain
- Hybrid The opportunity

Vulnerability Management is a core pillar of modern cybersecurity. In this role, you manage vulnerabilities end to end – from identification and risk-based prioritization to sustainable risk reduction. You operate at the intersection of technology, operations, and management, enabling informed security decisions and measurable improvement of the organization’s attack surface.

As a VMS at EY GDS Spain, you are the first line of defense in a 24/7 Cyber Security German-speaking clients

In addition, you help design and roll out vulnerability management landscapes (tooling, processes, integrations, and operating models) to establish scalable, repeatable capabilities across environments.

As a member of our team in the EY GDS Spain office in Malaga, you’ll have a chance to extend your knowledge & experience by working on interesting projects with the newest technologies and approaches. You’ll support clients in choosing the most suitable business solution and take part in digital transformation.

• Design, operate, and continuously improve an end-to-end vulnerability management process
• Design and roll out vulnerability management landscapes: tooling strategy, target architecture, integrations (e.g., ITSM), and operating model
• Continuously identify, consolidate, and assess vulnerabilities across technical systems and environments
• Perform risk-based prioritization by considering technical and organizational context (asset criticality, exposure, compensating controls, business impact)
• Coordinate and track remediation activities with responsible teams and stakeholders
• Maintain transparency on status, progress, exceptions, and accepted risks
• Prepare structured reporting for operational, tactical, and strategic stakeholders (status, risk, trends, KPIs)
• Support internal reviews, audits, management assessments, and decision-making processes
• Continuously optimize vulnerability management processes, methods, and metrics to improve maturity and measurable outcomes

• Structured, analytical, and self-driven working style with strong ownership
• Ability to communicate complex technical topics clearly and effectively to diverse stakeholders
• Strong coordination and stakeholder management skills across technology, operations, and management
• High sense of responsibility and quality awareness; focus on auditability and traceability
• Ability to translate security requirements into operationally feasible remediation plans and measurable progress

• 1 - +2 years of experience in vulnerability management, security management, or IT security
• Solid understanding of IT infrastructures, platforms, and system environments
• Experience with vulnerability lifecycle management from detection through remediation, verification, and risk acceptance
• Completed education or degree in a technical or information-technology related field (or equivalent practical experience)
• English at least B2 (written and spoken) is required.
• German at least B2 (written and spoken) is required.

• Hands-on experience with vulnerability management platforms such as Tenable and/or Qualys (nice to have)
• Experience working in regulated environments and/or supporting audit and compliance requirements
• Familiarity with common scoring and prioritization approaches (e.g., CVSS as an input to risk-based prioritization) and KPI-driven reporting
• Experience collaborating with engineering, operations, and service management teams in complex environments

We look for proactive owners who turn vulnerability data into action—connecting engineers, operations, and leaders to…