Security Risk & Vulnerability Governance Analyst – Italy

ION Group; Lombardia; On-site; EUR 40,000 - 50,000; Full time

Benefits offered by this job

CCNL Metalmeccanico

International environment

Job summary

ION Group in Milan, Italy, is seeking a Vulnerability Governance Analyst with 2–5 years in cybersecurity to strengthen vulnerability governance and risk posture across infrastructure, cloud, and applications. You will collaborate with cross-functional teams, develop dashboards, and support audits and regulatory assessments.

The role offers a permanent contract in a global technology group with a competitive gross salary of €40,000–€50,000, commensurate with experience.

Qualifications

• 2–5 years of experience in Vulnerability Management, Security Operations or related areas.
• Understanding vulnerability lifecycle management and remediation processes.
• Knowledge of ISO 27001, NIST CSF, CIS Controls and related regulations.
• Ability to communicate audit findings with clear risk-based reporting.
• Fluent Italian and English.

Responsibilities

• Support governance and continuous improvement of the enterprise Vulnerability Management program.
• Monitor remediation activities across infrastructure, cloud, endpoint, and apps.
• Perform risk-based vulnerability analysis considering exploitability and asset criticality.
• Correlate vulnerability data with CMDB, SBOM/SCA and ownership data to identify urgency.
• Prioritize vulnerabilities using a risk-based model and escalation processes.
• Coordinate remediation plans with Infra, Cloud, Development, and Risk teams.
• Develop and maintain vulnerability dashboards and executive reports.
• Support audits, regulatory assessments, and compliance activities.

Skills

Vulnerability Management

Security Governance

Risk-based Analysis

Executive Reporting

Stakeholder Management

Italian & English

Education

Master's degree in Cybersecurity

Tools

SBOM/SCA tooling

Vulnerability assessment platforms

Job description

ION Group in Milan, Italy, is seeking a Vulnerability Governance Analyst with 2–5 years in cybersecurity to strengthen vulnerability governance and risk posture across infrastructure, cloud, and applications. You will collaborate with cross-functional teams, develop dashboards, and support audits and regulatory assessments.

The role offers a permanent contract in a global technology group with a competitive gross salary of €40,000–€50,000, commensurate with experience.