Manager Product Owner Vulnerability Management & Effectiveness

Mainz, Germany | full time | Job ID: 11389

About the Role

As the Product Owner for Vulnerability Management & Effectiveness, you will oversee our IT vulnerability management program, ensuring effective identification, assessment, and tracking of vulnerabilities. In this strategic advisory role, you will define processes, set up scans, create incidents based on findings, and coordinate remediation efforts with responsible teams. Additionally, you will plan penetration testing and red teaming activities while maintaining the vulnerability management solution. Your focus will be on process management and stakeholder coordination rather than hands‑on technical implementation.

Your Contribution

• Define and implement processes, handbooks, and workflows for vulnerability management
• Maintain the vulnerability management solution, including technical updates such as updating local scanners
• Lead and manage external service providers to ensure effective and proactive vulnerability management
• Collaborate with internal stakeholders to set up scans, including firewall exclusions and tool configurations
• Create incidents based on scan findings, assign them to responsible teams, and follow up to ensure timely resolution
• Provide recommendations for fixing solutions based on tool outputs without direct implementation responsibility
• Plan, scope, and align penetration testing and red teaming activities with internal and external stakeholders
• Work closely with internal teams and external providers to ensure effective vulnerability management and testing coordination
• Ensure vulnerability management processes align with regulatory and organizational compliance requirements

A Good Match

• Bachelor's degree in Information Security, Computer Science, or a related field
• Several years of experience in vulnerability management, cybersecurity, or related roles
• Strong knowledge of vulnerability management tools (e.g., Nessus, MS Defender, Qualys, Tenable) and frameworks
• Experience coordinating penetration testing and red teaming activities
• Familiarity with incident management processes and tools
• Proven ability to work collaboratively with cross‑functional teams and external providers
• Excellent organizational and project management skills
• Analytical mindset with the ability to interpret scan results and provide actionable recommendations
• Strong communication skills for stakeholder coordination
• Knowledge of cybersecurity standards (e.g., NIST, OSCP, CEH oder HTB CPTS or ISO 27001)
• Fluent English skills, German is a plus

Your Benefits

• Your flexibility: flexible hours | vacation account
• Your growth: Digital Learning | Performance & talent development | leadership development | Apprenticeships | LinkedIn Learning
• Your value: Your voice at the table | Culture on an equal footing | Opportunities to shape & impact | Support for your full potential
• Your health and lifestyle: Company bike
• Your mobility: Job ticket | Deutschlandticket
• Your life phases: Employer‑funded pension | Childcare

BioNTech does not tolerate discrimination, favoritism or harassment based on gender, political views, religion or belief, nationality, ethnic or social origin, age, sexual orientation, marital status, disability, physical appearance, health status or any other physical or personal characteristics. BioNTech is committed to creating a diverse and inclusive work environment. We are proud to be an equal opportunity employer.