Vulnerability Governance Analyst

📋 Description

• Support governance and improvement of enterprise Vulnerability Management.
• Monitor remediation across infrastructure, cloud, endpoints, and apps.
• Perform risk-based analysis using exploitability, asset criticality, and threat intel.
• Correlate vulnerability data with CMDB, BIA, SBOM/SCA, and ownership data.
• Prioritize vulnerabilities with a risk-based model considering KEV/EPSS and exposure.
• Coordinate remediation plans with Infrastructure, Cloud, Development, App Security, and Risk teams.

🎯 Requirements

• Master's degree in Cybersecurity, CS, or related field.
• 2-5 years in Vulnerability Management, Security Operations, or Governance.
• Understanding of vulnerability lifecycle and remediation practices.
• Familiarity with vulnerability assessment platforms and reporting solutions.
• Knowledge of CVSS, EPSS, CISA KEV, exploit intelligence, and threat intel feeds.
• SBOM/SCA concepts; DevSecOps familiarity; ISO 27001, NIST CSF, CIS Controls, DORA, or NIS2 risk management.

🎁 Benefits

• Permanent employment contract.
• CCNL Metalmeccanico labor contract.
• Career development in a leading international technology group.
• Exposure to enterprise-scale cybersecurity governance in a dynamic environment.
• International, cross-functional team in a global setting.