Vulnerability Governance Analyst, Italy — Elevate Cyber Risk

ION Group; Milano; In loco; EUR 40.000 - 50.000; Tempo pieno

Vantaggi offerti da questo lavoro

CCNL Metalmeccanico

Descrizione del lavoro

ION Group is seeking a Vulnerability Governance Analyst in Italy to strengthen the CISO function and mature vulnerability management across enterprise and cloud environments. You will drive risk-based remediation, coordinate with Infrastructure, Development and Security teams, and deliver executive dashboards.

The role requires 2–5 years in cyber risk or governance, solid knowledge of vulnerability lifecycle and ISO/NIST references, plus fluency in Italian and English.

Competenze

• Master's degree in cybersecurity or related field.
• 2–5 years of experience in Vulnerability Management or related areas.
• Understanding of vulnerability lifecycle management and remediation processes.
• Familiarity with vulnerability assessment platforms and reporting solutions.
• Knowledge of ISO 27001, NIST CSF, CIS Controls, DORA, NIS2 in relation to vulnerability and ICT risk management.
• Excellent knowledge of Italian and English.
• Relevant certifications such as Security+, CySA+, CISSP, ISO 27001, or equivalent would be a plus.

Mansioni

• Support governance and continuous improvement of the enterprise Vulnerability Management program.
• Monitor remediation activities across infrastructure, cloud, endpoint, and application environments.
• Perform risk-based vulnerability analysis considering exploitability, asset criticality, exposure, business impact, and threat intelligence.
• Correlate vulnerability intelligence with CMDB, BIA, SBOM/SCA and application ownership data to identify exposed services and urgency of action.
• Prioritize vulnerabilities using a risk-based model considering exploitability, active exploitation, and external threat intel.
• Coordinate remediation plans with Infrastructure, Cloud, Development, Application Security, and Risk teams.
• Manage remediation exceptions, compensating controls, and risk acceptance processes.
• Develop and maintain vulnerability dashboards, KPIs, and executive reports.
• Support audits, regulatory assessments, and compliance activities related to cyber risk and vulnerability management.
• Contribute to policy and governance process improvements.

Conoscenze

Vulnerability Management

Security Operations

Cyber Risk

Security Governance

Threat Intelligence

Executive reporting

Formazione

Master's degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or a related field (with honors)

Strumenti

SBOM/SCA tools

Descrizione del lavoro

ION Group is seeking a Vulnerability Governance Analyst in Italy to strengthen the CISO function and mature vulnerability management across enterprise and cloud environments. You will drive risk-based remediation, coordinate with Infrastructure, Development and Security teams, and deliver executive dashboards.

The role requires 2–5 years in cyber risk or governance, solid knowledge of vulnerability lifecycle and ISO/NIST references, plus fluency in Italian and English.