Patch Management Capability Lead

This is a Patch Management Capability Lead role for AACB.

Start: ASAP.

End: 1 year contract with possibility to become internal. 36 hours a week. ZZP is possible. 3 days in office is required. Candidate Must already be living in the Netherlands. As Patch Management Capability Lead, you will define and deliver AACB’s patch management strategy in response to an increasingly AI-driven threat landscape. You will lead automation, reduce risk, and align Infrastructure, Security, Risk and Product teams to keep platforms secure, resilient and compliant.

Key responsibilities: Own the patch management vision, strategy and roadmap, with AI-driven vulnerability exploitation as a key priority. Accelerate and automate patching across operating systems, databases, middleware, networks and infrastructure applications. Select tools and define standards, processes and governance that improve deployment speed, quality and consistency. Align patch cycles, maintenance windows and operational requirements with Product Owners and infrastructure teams.

Partner with CISO, Risk and Security teams to ensure policy compliance, remove remediation barriers and reduce risk. Track performance through KPIs, compliance metrics and risk indicators, and lead continuous improvement across the organisation. Advise senior stakeholders on patching strategy, cyber resilience and operational risk. With the following results (SMART): Accelerate patching on priority platforms. Update patching runbooks and processes to address AI-driven threats.

Assess tools to automate patching across platforms and applications. Reduce patching lead times across all platforms. Lead architecture improvements for automated, continuous patching. Improve patching metrics and reporting in ServiceNow. Development and improvement of proper MI and Reporting on Patching from ServiceNow as one source of patching information.

Requirements: General: Fluent in business English, Strong ownership, accountability and urgency, Strong understanding of AI concepts and the practical use.

Patch and Vulnerability Management: Enterprise patching and vulnerability remediation experience, Balances security, stability and business priorities.

Infrastructure: Strong Windows and Linux knowledge, Knowledge of databases and middleware, Knowledge of network technologies, Understanding of hybrid cloud and data centres, Track record in automation, Experience with ServiceNow.

Stakeholder Communication: Explains complex technical and risk topics clearly, Influences stakeholders without direct authority, Works effectively with product, platform, architecture, security and senior leaders, Strong facilitation and negotiation skills.

Risk and Governance: Knowledge of vulnerability, lifecycle and cybersecurity controls, Experience in regulated environments, Turns policies and standards into practical processes.