Vulnerability Governance Analyst, Italy
Core
Strengthen the organization's vulnerability governance framework and security posture by monitoring remediation, performing risk-based analysis, and coordinating with cross-functional teams.
Role type
Vulnerability Governance Analyst
Builds
Enterprise vulnerability management program and security posture
Domain
Cybersecurity / Financial Services
Deliverable
dashboards & analysis
Required skills
Vulnerability lifecycle management, Risk-based prioritization (CVSS, EPSS, CISA KEV), Software supply chain security (SBOM, SCA), Regulatory compliance (ISO 27001, NIST CSF, DORA, NIS2), Executive reporting
Preferred skills
Relevant certifications (Security+, CySA+, CISSP, ISO 27001)
Technologies
Vulnerability assessment platforms, CMDB, BIA, SBOM/SCA tools
Responsibilities
Monitor vulnerability remediation across infrastructure, cloud, endpoint, and application environments; Perform risk-based vulnerability analysis considering exploitability and asset criticality; Correlate vulnerability intelligence with application ownership data; Prioritize vulnerabilities using a risk-based model; Coordinate remediation plans with Infrastructure, Cloud, and AppSec teams; Manage remediation exceptions and risk acceptance processes; Develop and maintain vulnerability dashboards and executive reports; Support audits and regulatory assessments.
Seniority
Mid-level (2-5 years experience)