Vulnerability Governance Analyst

ION Group
Milan
Workplace: HybridFull timeEUR 40,000 - 50,000 annuallyFunction: Data Analytics & Business IntelligenceExperience: 2-5 yearsEducation: mastersSkills: ["Communication","Analytical skills","Organizational skills","Stakeholder management"]

Support the Chief Information Security Office by governing and continuously improving the enterprise Vulnerability Management program. Monitor remediation across infrastructure, cloud, endpoints, and applications to ensure compliance with remediation targets. Perform risk-based vulnerability analysis and prioritization using exploitability, asset criticality, exposure, and threat intelligence. Correlate findings with CMDB/BIA/SBOM-SCA data, coordinate remediation with cross-functional teams, manage exceptions, and produce dashboards, KPIs, and executive reports.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
ION Group
ION Group
1 month ago

Vulnerability Governance Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 14 hours agoStatus: Live

Job Summary

Support the Chief Information Security Office by governing and continuously improving the enterprise Vulnerability Management program. Monitor remediation across infrastructure, cloud, endpoints, and applications to ensure compliance with remediation targets. Perform risk-based vulnerability analysis and prioritization using exploitability, asset criticality, exposure, and threat intelligence. Correlate findings with CMDB/BIA/SBOM-SCA data, coordinate remediation with cross-functional teams, manage exceptions, and produce dashboards, KPIs, and executive reports.
Location: Milan
Workplace: Hybrid
Employment Type: Full time · Permanent
Job Function: Data Analytics & Business Intelligence
Seniority: Mid level

Key Responsibilities

  • •Support the governance and continuous improvement of the enterprise Vulnerability Management program.
  • •Monitor vulnerability remediation activities across infrastructure, cloud, endpoint, and application environments to ensure compliance with remediation targets and governance requirements.
  • •Perform risk-based vulnerability analysis considering exploitability, asset criticality, exposure, business impact, and threat intelligence, and prioritize vulnerabilities beyond technical severity.
  • •Correlate vulnerability intelligence with CMDB, BIA, SBOM/SCA, and application ownership data to identify exposed services, impacted customers, remediation owners, and urgency of action.
  • •Manage remediation exceptions, compensating controls, and risk acceptance; develop vulnerability dashboards, KPIs, operational metrics, and executive reports; support escalation and audits/regulatory assessments.

Pay and Benefits

Salary: EUR 40,000 - 50,000 annually

Key Requirements

  • •Master’s degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or a related field (with honors).
  • •2–5 years of experience in Vulnerability Management, Security Operations, Cyber Risk, Security Governance, or related areas.
  • •Understanding of vulnerability lifecycle management, remediation processes, and exposure management practices.
  • •Familiarity with vulnerability assessment platforms and reporting solutions.
  • •Knowledge of vulnerability prioritization methodologies and references such as CVSS, EPSS, CISA KEV, exploit intelligence, and threat intelligence feeds.
Experience:2-5 years
Education:Master's
Skills:CommunicationAnalytical skillsOrganizational skillsStakeholder management
Certifications:Security+CySA+CISSPISO 27001
Languages:ItalianEnglish
Tech Stack:Vulnerability ManagementCMDBBIASBOMSCADevSecOpsCISA KEVEPSSCVSSThreat intelligenceISO 27001NIST CSFCIS ControlsDORANIS2

Company Brief

ION Group
Provides trading, workflow and risk management software and technology solutions for capital markets, treasury and asset management firms, delivering front-to-back systems, analytics and connectivity to financial institutions worldwide.
Industry: Enterprise Software
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Funding: Private Equity Backed
Headquarters: London, United Kingdom
WebsiteLinkedIn