{"id":655578,"url":"https://alion.io/job/iongroup-vulnerability-governance-analyst-italy","title":"Vulnerability Governance Analyst, Italy","company":{"id":678233,"name":"ION Group","domain":"iongroup.com","url":"https://alion.io/company/iongroup-2","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"C","score":60,"open_postings":74,"ghost_share":0.662,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":51,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Milan, Italy"],"countries":["IT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":40000,"max":50000,"currency":"EUR","period":"year","gross":null,"usd_annual":56157},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"ISO 27001","optional":false},{"name":"KEV","optional":false},{"name":"NIST CSF","optional":false},{"name":"SBOM","optional":false}],"status":"live","first_seen_at":"2026-07-27T14:37:15Z","employer_posted_date":"2026-07-27","last_verified_at":"2026-11-01T08:47:11Z","board_verified":true,"closed_at":null,"days_open":96,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":96},"description":"About us:\nWe are a community of visionary innovators, dedicated to providing pioneering software and consultancy services to financial institutions, trading firms, central banks, governments, and corporations around the world. We strive to simplify the way people work. We do that by providing workflow and process automation software, as well as providing real-time data and business intelligence to help people make better decisions. We are 13,000+ employees, we operate globally with 80+ global offices, and we serve over 4,800+ customers worldwide.\nFor the strengthening of the Chief Information Security Office (CISO) function within Cedacri companies, part of ION Group, we are looking for talented professionals to grow their career as Vulnerability Governance Analyst. This position is targeted at candidates with 2-5 years of relevant experience in Cybersecurity, Vulnerability Management, or Information Security Governance. Selected candidates will be placed in a dynamic and innovative environment and will collaborate with cross-functional teams to strengthen the organization’s vulnerability governance framework and security posture.\nLearn more at www.iongroup.com.\n\nYour role\nYour key duties and responsibilities\nSupport the governance and continuous improvement of the enterprise Vulnerability Management program.\nMonitor vulnerability remediation activities across infrastructure, cloud, endpoint, and application environments, ensuring compliance with established remediation targets and governance requirements.\nPerform risk-based vulnerability analysis considering exploitability, asset criticality, exposure, business impact, and threat intelligence.\nCorrelate vulnerability intelligence with CMDB, BIA, SBOM/SCA and application ownership data to identify exposed services, impacted customers, remediation owners and urgency of action.\nPrioritize vulnerabilities using a risk-based model that goes beyond technical severity, considering exploitability, evidence of active exploitation, CISA KEV/EPSS, Internet exposure, asset criticality, client impact and multi-tenant blast radius\nCoordinate remediation plans and follow-up activities with Infrastructure, Cloud, Development, Application Security, and Risk teams.\nManage remediation exceptions, compensating controls, and risk acceptance processes.\nDevelop and maintain vulnerability dashboards, KPIs, operational metrics, and executive reports.\nSupport the escalation and governance of critical vulnerabilities and high-risk exposure scenarios.\nContribute to the definition and continuous improvement of vulnerability management policies, standards, and governance processes.\nSupport audits, regulatory assessments, and compliance activities related to cyber risk and vulnerability management.\n\nOther duties\nWe might ask you to perform other tasks and duties as your role expands.\nYour skills, experience, and qualifications required\nMaster's degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or a related field (with honors)\nAt least 2-5 years of experience in Vulnerability Management, Security Operations, Cyber Risk, Security Governance, or related areas.\nUnderstanding of vulnerability lifecycle management, remediation processes, and exposure management practices.\nFamiliarity with vulnerability assessment platforms and reporting solutions.\nKnowledge of vulnerability prioritization methodologies and industry references such as CVSS, EPSS, CISA KEV, exploit intelligence, and threat intelligence feeds.\nFamiliarity with software supply chain security concepts, SBOMs, SCA practices, and DevSecOps environments.\nKnowledge of ISO 27001, NIST CSF, CIS Controls, DORA, and NIS2 requirements related to vulnerability and ICT risk management.\nAbility to communicate technical findings through clear risk-based reporting and executive-level summaries.\nStrong analytical, organizational, and stakeholder management skills.\nExcellent knowledge of Italian and English.\nRelevant certifications such as Security+, CySA+, CISSP, ISO 27001, or equivalent would be considered a plus.\nWhat we offer:\nPermanent employment contract\nItalian National Collective Labour Agreement for the Metalworking Industry (CCNL Metalmeccanico)\nGross Annual Salary (RAL) ranging from €40,000 to €50,000, depending on experience, skills, and qualifications\nJob grade to be determined upon completion of the selection process, with final assessment between B2 and B3 level\nOpportunity to join a leading international technology group operating in the financial services industry\nExposure to enterprise-scale cybersecurity governance activities within a dynamic and international environment\nLocation:\nMilan.\nImportant notes:\nAccording to the Italian Law (L.68/99), candidates belonging to the protected categories list will be given priority.","description_format":"text","description_chars":4828,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[{"language":"Italian","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Italy","iso":"IT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","Information Security","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-09-10T20:52:54Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.3,"p_room":0.36,"age_days":96,"expected_fill_days":51,"reasons":["conf:1","stale_co","velocity","ghost","win:tail","crowd:junior"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":56157,"is_top_pay":false},"html_url":"https://alion.io/job/iongroup-vulnerability-governance-analyst-italy","json_url":"https://alion.io/job/iongroup-vulnerability-governance-analyst-italy.json","meta":{"generated_at":"2026-11-01T11:56:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18481,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678233},"rest":"https://alion.io/mcp/rest/get_company?id=678233"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fiongroup-vulnerability-governance-analyst-italy"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fiongroup-vulnerability-governance-analyst-italy"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fiongroup-vulnerability-governance-analyst-italy"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/iongroup-vulnerability-governance-analyst-italy\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fiongroup-vulnerability-governance-analyst-italy"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":655578}},{"tool":"search_jobs","arguments":{"company":"iongroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":655578},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}