Vulnerability Governance Analyst, Italy

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7ds5is

Vulnerability Governance Analyst, Italy at Ion.
Key facts
- Location: Milan, Italy
- Engagement: Full-time (hybrid)
- Team: Chief Information Security Office (CISO)

What you'll do
- Contribute to the continuous enhancement of the enterprise Vulnerability Management program to ensure its effectiveness and efficiency.
- Supervise the remediation of vulnerabilities across diverse environments, including infrastructure, cloud services, and applications, while ensuring adherence to established compliance targets.
- Perform risk-based vulnerability assessments that take into account factors such as exploitability, asset significance, and potential business impact.
- Integrate vulnerability data with configuration management, business impact analysis, and software bill of materials (SBOM) to accurately identify affected services and determine the urgency of remediation efforts.
- Utilize a risk model to prioritize vulnerabilities, factoring in elements like active exploitation, CISA Known Exploited Vulnerabilities (KEV), and exposure on the internet.




- Coordinate and manage remediation plans, maintaining communication and follow-up with various technical teams and risk management stakeholders.
- Handle exceptions, implement compensating controls, and oversee risk acceptance processes related to identified vulnerabilities.
- Develop and maintain dashboards, key performance indicators (KPIs), and comprehensive reports for effective vulnerability management.
- Assist in the escalation and governance processes for critical vulnerabilities and high-risk scenarios.
- Collaborate in defining and refining policies, standards, and governance processes related to vulnerability management.
- Support audit activities, regulatory assessments, and compliance initiatives concerning cyber risk and vulnerability management.

Requirements
- A Master's degree (with honors) in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or a closely related discipline.
- Be

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7ds5is