Security Governance Analyst, Italy

About the role

Ion is seeking a professional to join the Chief Information Security Office team within the Cedacri division. You will manage security frameworks, risk assessments, and compliance reporting while working alongside cross-functional departments to maintain our cybersecurity standards.

Key facts

What you'll do

• Update and manage cybersecurity policies, standards, and governance documentation.
• Conduct risk assessments, track remediation efforts, and manage security exceptions.
• Evaluate the maturity of security controls to ensure they meet regulatory and internal goals.
• Maintain records and evidence for audits, client due diligence, and regulatory inquiries.
• Build KPI and KRI dashboards covering areas such as patching, API inventories, and SBOM/SCA coverage.
• Coordinate with Legal, Risk, Compliance, and Technology teams to align security requirements.
• Assist with the adoption of frameworks like DORA, NIS2, ISO 27001, and NIST CSF.

Requirements

• Master degree in Cybersecurity, Computer Science, Computer Engineering, IT, Law, or Management Engineering (with honors).
• 2 to 5 years of professional experience in ICT Risk Management, Information Security Governance, or Cybersecurity Compliance.
• Proficiency in governance principles related to incident response, secure SDLC, vulnerability management, and third-party risk.
• Familiarity with ISO 27001, NIST CSF, COBIT, CIS Controls, DORA, and NIS2.
• Experience managing audit processes and regulatory reporting.
• Ability to communicate technical risk information to management.
• Fluency in both Italian and English.

Nice to have

• Professional certifications such as CISA, CRISC, Security+, or ISO 27001 auditor credentials.

Skills & tools

• Microsoft Excel
• Microsoft PowerPoint

Practical notes

• Compensation: Gross Annual Salary (RAL) between 40,000 and 50,000 Euro based on background.
• Contract: Permanent position under the Italian National Collective Labour Agreement for the Metalworking Industry (CCNL Metalmeccanico).
• Grade: Final placement will be determined at the end of the selection process at level B2 or B3.
• Priority: Candidates registered under the Italian Law (L.68/99) for protected categories will receive preference.