Vulnerability Lifecycle Lead - Security Operations

NTT DATA Europe & Latam; Emilia-Romagna; In loco; EUR 42.000 - 65.000; Tempo pieno

Descrizione del lavoro

NTT DATA Europe & Latam is seeking a skilled Vulnerability Management Specialist to join our IT security team in Emilia-Romagna. You will monitor vulnerabilities across enterprise infrastructure, applications, and cloud, prioritizing remediation in alignment with severity models and SLAs.

The role emphasizes end-to-end vulnerability lifecycle management, collaboration with BISOs, asset owners, and IT operations, and clear risk communication to leadership.

Competenze

• 3+ years in information security with vulnerability management experience.
• Experience in end-to-end vulnerability lifecycle management (discovery, classification, remediation, validation, and closure).
• Knowledge of compensating controls and risk mitigation strategies.
• Cross-functional collaboration with BISOs, asset owners, IT operations, and security teams.

Mansioni

• Monitor vulnerabilities across infrastructure, applications, and cloud environments, prioritizing remediation by severity and SLAs.
• Validate vulnerability alerts, assess business impact, and coordinate triage with asset owners and security teams.
• Oversee the end-to-end vulnerability lifecycle from discovery to remediation verification and closure.
• Produce clear dashboards, reports, and metrics to communicate risk exposure and remediation progress to leadership.
• Collaborate with penetration testing, configuration, and threat intelligence functions to contextualize vulnerabilities.

Conoscenze

Vulnerability Management

SecOps

Threat Analysis

Stakeholder Collaboration

Dashboards & Reporting

Cloud & Infra

English Proficiency

Strumenti

SIEM

Vulnerability Scanning

Compliance Tools

Descrizione del lavoro

NTT DATA Europe & Latam is seeking a skilled Vulnerability Management Specialist to join our IT security team in Emilia-Romagna. You will monitor vulnerabilities across enterprise infrastructure, applications, and cloud, prioritizing remediation in alignment with severity models and SLAs.

The role emphasizes end-to-end vulnerability lifecycle management, collaboration with BISOs, asset owners, and IT operations, and clear risk communication to leadership.