Security Governance Analyst in Milan — Risk & Compliance

ION Group; Lombardia; On-site; EUR 40,000 - 50,000; Full time

Benefits offered by this job

Permanent contract

CCNL Metalmeccanico

Job summary

ION Group in Milan is seeking a Security Governance Analyst to strengthen the CISO function across the organization. You will contribute to governance, risk management, and compliance activities in a dynamic, international setting.

The role requires 2–5 years of relevant experience, a Master’s degree in a related field, and strong knowledge of ISO 27001, NIST CSF, and regulatory requirements. The position offers a permanent contract and exposure to enterprise-wide cybersecurity governance.

Qualifications

• Master's degree in Cybersecurity or related field preferred.
• 2–5 years of experience in Information Security Governance, ICT Risk Management, or Cybersecurity Compliance.
• Good understanding of governance principles for vulnerability management, patch management, incident response, secure SDLC, third-party risk, and operational resilience.
• Familiarity with ISO 27001, NIST CSF, COBIT, CIS Controls, DORA, and NIS2.
• Experience supporting audit activities and governance reporting.

Responsibilities

• Assist in implementing and improving the Information Security Governance framework across the organization.
• Develop and maintain cybersecurity policies, standards, procedures, and governance documents.
• Support risk management activities including risk assessments and remediation tracking.
• Monitor and report on security controls maturity and governance effectiveness.
• Prepare KPI/KRI dashboards and governance reporting for stakeholders.
• Collaborate with Technology, Risk, Compliance, Legal, and business units.

Skills

Information Security Governance

ICT Risk Management

Cybersecurity Compliance

Internal Audit

Governance reporting

Analytical skills

Stakeholder management

Excel

PowerPoint

English language

Italian language

Education

Master's degree in Cybersecurity

Job description

ION Group in Milan is seeking a Security Governance Analyst to strengthen the CISO function across the organization. You will contribute to governance, risk management, and compliance activities in a dynamic, international setting.

The role requires 2–5 years of relevant experience, a Master’s degree in a related field, and strong knowledge of ISO 27001, NIST CSF, and regulatory requirements. The position offers a permanent contract and exposure to enterprise-wide cybersecurity governance.