Senior Vulnerability Manager for Cyber Defense

Help shape the future of Vulnerability Management at TDC Brands Cyber Defense is transforming how TDC Brands identifies, prioritises and manages cyber risk across one of Denmark's largest digital environments. We are building a well-established, risk-based Vulnerability Management capability spanning infrastructure, cloud, end-user devices, applications and third-party services. We are looking for a Senior Vulnerability Manager who combines technical expertise with the ability to turn complex vulnerability findings into meaningful risk decisions and practical remediation strategies. This is not just about patching or managing scanner findings. You will play a key role in shaping how TDC Brands assesses technical exposure, prioritises vulnerabilities and supports measurable risk reduction across the organisation. Your role As Senior Vulnerability Manager, you will manage the technical discipline of Vulnerability Management within Cyber Defense. You will work closely with infrastructure teams, application owners, architects, security specialists and technology partners to ensure vulnerabilities are properly understood, technically assessed and addressed based on actual risk. Together with your colleague you will form the core of the Vulnerability Management capability. While your primary focus will be technical assessment, prioritisation and remediation, your counterpart will primarily lead platforms, data, analytics and reporting. The two roles will work closely together and provide mutual coverage when required. You will play a key role in shaping how technical Vulnerability Management evolves across TDC Brands. Key Responsibilities You will:

• Manage and continuously improve the technical Vulnerability Management discipline across TDC Brands
• Analyse and validate vulnerabilities based on exploitability, exposure, threat intelligence, asset criticality and business context
• Develop and maintain risk-based prioritisation methodologies using CVSS, EPSS and other relevant vulnerability and threat intelligence
• Advise technology teams and system owners on remediation strategies, compensating controls and alternative risk mitigation
• Challenge remediation plans and help ensure that vulnerabilities are addressed according to actual risk
• Provide technical input to vulnerability exceptions and risk acceptance decisions
• Identify systemic and recurring vulnerability patterns and help support long-term remediation
• Contribute to Vulnerability Management policies, standards, technical controls, audits and regulatory requirements
• Work closely with the Vulnerability Intelligence & Analytics Manager to improve prioritisation, data quality and visibility of cyber risk

What we are looking for You have a solid technical security background and understand Vulnerability Management beyond severity scores and patch compliance. You are comfortable diving deeply into technical findings, understanding how vulnerabilities can realistically be exploited and translating that understanding into clear recommendations for engineers, system owners and senior stakeholders. We expect you to bring:

• 5+ years of relevant experience within Vulnerability Management, Security Engineering, infrastructure security or a similar technical security discipline
• Solid knowledge of the vulnerability lifecycle and experience with enterprise platforms such as Rapid7, Qualys, Tenable, Microsoft Defender Vulnerability Management or similar
• Experience analysing CVEs, CVSS, EPSS, exploitability and threat intelligence
• Solid understanding of enterprise technologies including Windows, Linux, Active Directory, Entra ID and cloud environments
• Experience with risk-based vulnerability prioritisation, patch management and compensating security controls
• The ability to assess technical exposure and distinguish theoretical vulnerabilities from meaningful risk
• Solid stakeholder management skills and the ability to translate complex technical findings into clear risk decisions

Experience with PowerShell, Python, APIs, security automation or similar technologies is an advantage. Experience from a large enterprise environment and familiarity with frameworks such as NIST CSF, CIS Controls or ISO 27001 is also valuable. Relevant security certifications are welcome but not required. Why Cyber Defense at TDC Brands? You will join a diverse Cyber Defense organisation of 13+ colleagues working across Vulnerability Management, Security Architecture, Security Operations and Identity & Access Management. You will have the opportunity to:

• Help build and mature Vulnerability Management at enterprise scale
• Work with modern security technologies across a large and complex technology landscape
• Influence how technical cyber risk is understood, prioritised and mitigated across TDC Brands
• Work closely with experienced security and technology specialists
• Develop your skills through professional training and certifications
• Work in a flexible and collaborative environment

We are looking for someone who is analytical and pragmatic, takes ownership and is comfortable challenging existing practices constructively while building strong relationships across the organisation. If you want to help move Vulnerability Management from findings and severity scores towards meaningful, risk-based cyber defence, we would like to hear from you. Application The position is full-time with workplace at Teglholmsgade 1, Copenhagen or Sletvej 30, Aarhus, and we expect regular presence at one of our offices. Desired start date is as soon as possible. Candidates must be EU/EEA citizens and reside in Denmark. Application: It is not necessary to attach a cover letter, but please include a brief introduction in your CV about why you are applying for this position. To ensure a fair and inclusive recruitment process, we kindly ask you to refrain from adding a photo to your CV. It is a condition of employment that your criminal record is approved by TDC Brands. Application date: 12/11/2026 Contact person: Kenny Damgaard Outzen at kdni@tdcbrands.dk Work location: Teglholmsgade 1, Copenhagen & Sletvej 30, Aarhus TDC Brands (former Nuuday) – Securely into the future About TDC Brands TDC Brands consists of a number of strong brands that together deliver innovative digital services within TV, broadband, network and telephony to private customers and businesses. YouSee, Telmore, Hiper and eesy serve Danes across age, gender and place of residence in the private market. In the business market, TDC Brands serves both small and large companies with TDC Erhverv and Relatel. TDC Brands currently employs around 3,000 people and has approximately 6 million private and business customer relationships. Read more about TDC Brands at tdcbrands.dk. Brands