Technical Security Analyst
Pubblicato il 15-10-2026 - Ntt Data Europe & Latam in Bologna
Who We Are
The BISO I&T; team acts as the strategic bridge between the Office of Information Security (OIS), Global IT, and Global Assets, ensuring that enterprise infrastructure and platforms are secure by design, technically compliant, and operationally resilient. The function translates corporate security strategy into executable technical requirements, balancing risk, standards, and delivery at scale.
Who We Are
The BISO I&T; team acts as the strategic bridge between the Office of Information Security (OIS), Global IT, and Global Assets, ensuring that enterprise infrastructure and platforms are secure by design, technically compliant, and operationally resilient. The function translates corporate security strategy into executable technical requirements, balancing risk, standards, and delivery at scale.
What You'll Be Doing
Monitor, analyze, and prioritize vulnerabilities identified across corporate infrastructure, applications, and cloud environments, ensuring alignment with internal severity models and remediation SLAs.
Validate vulnerability alerts, assess business impact,
and coordinate triage activities with asset owners, BISOs, IT operations, and security teams to drive timely remediation.
Oversee the end-to-end vulnerability lifecycle, from discovery and classification to remediation tracking, closure verification, and compliance reporting.
Support security posture improvement initiatives by analyzing recurring weaknesses, identifying systemic gaps, and recommending corrective or preventive measures.
Produce clear dashboards, reports, and metrics to communicate risk exposure, remediation progress, SLA adherence, and posture improvement trends to leadership.
Collaborate with penetration testing, configuration, and threat intelligence functions to contextualize vulnerabilities and strengthen operational resilience.
Ensure alignment with corporate vulnerability management standards, policies, and security controls, supporting audits and regulatory requirements.