Vulnerability Management Expert

About the role

The Vulnerability Management Expert will join Millicom’s Group Information Security team to lead the vulnerability management process across the company’s infrastructure and applications. This role ensures that security risks are identified, prioritised and remediated in line with global policies and business objectives.

Key responsibilities

• Define and implement a tailored vulnerability management methodology aligned with the Information Security strategy and industry best practices.
• Establish risk‑based processes for vulnerability assessment and penetration testing, providing clear guidelines for remediation prioritisation.
• Lead the standardisation of vulnerability management activities across local and remote teams.
• Develop, track and report key performance indicators (KPIs) to give visibility on risk exposure, remediation progress and overall security posture.
• Provide executive‑level reporting on vulnerability coverage, risk status and remediation outcomes.
• Manage relationships with external vendors and third‑party service providers involved in vulnerability scanning and penetration testing.

Required profile

• Strong technical knowledge of hardware, software, network and application security vulnerabilities.
• Proven experience in managing vulnerability management and penetration testing programmes.
• Excellent communication, organisational and leadership abilities.
• Ability to coordinate with both local and global teams to ensure process alignment.

Required skills

• Vulnerability management
• Penetration testing
• Risk‑based remediation prioritisation
• KPI development and reporting
• Vendor and third‑party coordination