Security Governance Analyst, Italy

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7ea2f1

Security Governance Analyst, Italy at Ion. About the role Ion is on the lookout for a dedicated individual to join the Chief Information Security Office team within the Cedacri division. This position involves overseeing security frameworks, conducting risk assessments, and preparing compliance reports. You will collaborate with various departments to uphold our cybersecurity standards and ensure that our practices align with regulatory requirements.
Key facts
Location: Milan
Engagement: Full-time (hybrid)
Team: Chief Information Security Office (CISO)
What you'll do
- Regularly update and manage documentation related to cybersecurity policies, standards, and governance frameworks to ensure they remain current and effective.
- Perform thorough risk assessments, monitor remediation activities, and handle security exceptions to mitigate potential vulnerabilities.
- Assess the maturity of existing security controls to confirm they align with both regulatory requirements and internal objectives.
- Maintain comprehensive records and evidence necessary for audits,



client due diligence processes, and responses to regulatory inquiries.
- Develop and manage Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) dashboards that cover critical areas such as patch management, API inventories, and Software Bill of Materials (SBOM) and Software Composition Analysis (SCA) coverage.
- Collaborate with Legal, Risk, Compliance, and Technology teams to ensure that security requirements are well integrated and understood across the organization.
- Support the implementation and adoption of various frameworks, including DORA, NIS2, ISO 27001, and NIST Cybersecurity Framework (CSF).
- Engage in continuous improvement initiatives related to cybersecurity governance and compliance processes.
- Provide training and guidance to staff on security policies and best practices to foster a culture of security awareness.
- Participate in incident response activities and contribute to the

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7ea2f1