Security Governance Analyst, Italy
ION· ION Core Banking – Information Security & Compliance
Milan€40k - €50kFull-time (hybrid)Posted 2mo ago
About the role
Security Governance Analyst role within Cedacri companies, part of ION Group, focused on strengthening the Chief Information Security Office function through governance, risk management, and compliance activities in Italy.
Responsibilities
- Support the implementation and continuous improvement of the Information Security Governance framework
- Support the implementation, maintenance, and continuous improvement of the Information Security Governance framework across the organization
- Develop, maintain, and review cybersecurity policies, standards, procedures, and governance documentation
- Support cybersecurity risk management activities, including risk assessments, remediation tracking, exception management, and risk treatment planning
- Monitor the effectiveness and maturity of security controls and ensure governance activities remain aligned with organizational objectives and regulatory requirements
- Maintain governance evidence, action plans, ownership records, dependencies, and remediation initiatives to support audit readiness and effective reporting
- Prepare KPI/KRI dashboards for management on coverage, timeliness and effectiveness of controls, including asset/API inventories, SBOM/SCA coverage, patching performance, exception aging and action-plan closure
- Collaborate with Technology, Risk, Compliance, Legal, and Business stakeholders to ensure alignment with security governance requirements
- Support internal audits, external audits, regulatory assessments, and client due diligence activities
- Contribute to the implementation of regulatory and industry frameworks, including DORA, NIS2, ISO 27001, NIST CSF, and related standards
- Support governance transformation initiatives and continuous improvement programs aimed at strengthening cybersecurity oversight capabilities
- We might ask you to perform other tasks and duties as your role expands.
Qualifications
- Master's degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, Law, Management Engineering, or a related field (with honors)
- At least 2-5 years of experience in Information Security Governance, ICT Risk Management, Cybersecurity Compliance, Internal Audit, or related functions
- Good understanding of cybersecurity governance principles, governance requirements for vulnerability management, patch management, incident response, secure SDLC, third-party risk and operational resilience
- Knowledge of ISO 27001, NIST CSF, COBIT, CIS Controls, DORA, and NIS2
- Experience supporting audit activities, compliance assessments, regulatory initiatives, or governance reporting processes
- Ability to translate complex technical topics into clear governance, risk, and management reporting outputs
- Strong analytical, organizational, and stakeholder management skills
- Advanced knowledge of Microsoft Excel and PowerPoint
- Excellent knowledge of Italian and English
- Professional certifications such as ISO 27001, CISA, CRISC, Security+, or equivalent would be considered a plus
Skills
Required:Information Security GovernanceRegulatory frameworksAudit supportReporting & analyticsCommunication
Benefits
- Permanent employment contract
- Italian National Collective Labour Agreement for the Metalworking Industry (CCNL Metalmeccanico)
- Gross Annual Salary (RAL) ranging from €40,000 to €50,000, depending on experience, skills, and qualifications
- Job grade to be determined upon completion of the selection process, with final assessment between B2 and B3 level
- Opportunity to join a leading international technology group operating in the financial services industry
- Exposure to enterprise-wide cybersecurity governance activities in a dynamic and international environment
Last updated Oct 21, 2026. Interested? Apply on the company site.
About ION
Reinventing the way business is done through automation technology
ION financial software improves decision making, simplifies complicated processes and empowers you by providing the right tools.
automationexecutionimagination
More open roles at ION
- Senior Business Analyst (contractor), London4d agoHybrid (London) · Lab49 – Product and Delivery / Service Provider / Hybrid
- Senior Regulatory Reporter1w agoHybrid (Beijing or Shanghai) · ION Analytics – Content & Research
- Software Developer, 2027 Leadership Development Program, Woking2w agoWoking · ION Markets – Leadership Development Program
- Rotational Analyst, 2027 Leadership Development Program, London2w agoHybrid (London) · ION Markets – Leadership Development Program
- LAB49 Senior Android Engineer, Noida3w agoNoida · Lab49 – Software Engineering