Introduction
Start: ASAP
End: 1 year contract with possibility to become internal
36 hours a week
ZZP is possible
3 days in office is required
Candidate Must already be living in the Netherlands
Function
As Patch Management Capability Lead, you will define and deliver AACB’s patch management strategy in response to an increasingly AI-driven threat landscape. You will lead automation, reduce risk, and align Infrastructure, Security, Risk and Product teams to keep platforms secure, resilient and compliant.
Key responsibilities:
Own the patch management vision, strategy and roadmap, with AI-driven vulnerability exploitation as a key priority.
Accelerate and automate patching across operating systems, databases, middleware, networks and infrastructure applications.
Select tools and define standards, processes and governance that improve deployment speed, quality and consistency.
Align patch cycles, maintenance windows and operational requirements with Product Owners and infrastructure teams.
Partner with CISO, Risk and Security teams to ensure policy compliance, remove remediation barriers and reduce risk.
Track performance through KPIs, compliance metrics and risk indicators, and lead continuous improvement across the organisation.
Advise senior stakeholders on patching strategy, cyber resilience and operational risk.
With the following results (SMART)
Accelerate patching on priority platforms.
Update patching runbooks and processes to address AI-driven threats.
Assess tools to automate patching across platforms and applications. Reduce patching lead times across all platforms.
Lead architecture improvements for automated, continuous patching.
Improve patching metrics and reporting in ServiceNow.
Development and improvement of proper MI and Reporting on Patching from ServiceNow as one source of patching information
Requirements
General
· Fluent in business English
· Strong ownership, accountability and urgency
· Strong understanding of AI concepts and the practical use
Patch and Vulnerability Management
· Enterprise patching and vulnerability remediation experience
· Balances security, stability and business priorities
Infrastructure
· Strong Windows and Linux knowledge
· Knowledge of databases and middleware
· Knowledge of network technologies
· Understanding of hybrid cloud and data centres
· Track record in automation
· Experience with ServiceNow
Stakeholder Communication
· Explains complex technical and risk topics clearly
· Influences stakeholders without direct authority
· Works effectively with product, platform, architecture, security and senior leaders
· Strong facilitation and negotiation skills
Risk and Governance
· Knowledge of vulnerability, lifecycle and cybersecurity controls
· Experience in regulated environments
– Turns policies and standards into practical processes