Security Governance Analyst (Cybersecurity)

Location: Milan, Italy; hybrid workplace

Gross annual salary: €40,000–€50,000, depending on experience, skills, and qualifications.

Company

hirify.global provides software, workflow automation, real-time data, business intelligence, and consultancy services to financial institutions, trading firms, central banks, governments, and corporations.

What you will do

• Support the implementation and continuous improvement of the information security governance framework.
• Develop, maintain, and review cybersecurity policies, standards, procedures, and governance documentation.
• Support cybersecurity risk assessments, remediation tracking, exception management, and risk treatment planning.
• Monitor security control effectiveness and maturity, maintaining evidence, ownership records, action plans, and remediation initiatives for audit readiness.
• Prepare KPI/KRI dashboards covering control coverage, patching, asset and API inventories, SBOM/SCA coverage, exception aging, and action-plan closure.
• Collaborate with Technology, Risk, Compliance, Legal, and Business stakeholders and support audits, regulatory assessments, and client due diligence.

Requirements

• Master’s degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, Law, Management Engineering, or a related field.
• 2–5 years of experience in information security governance, ICT risk management, cybersecurity compliance, internal audit, or a related function.
• Understanding of vulnerability management, patch management, incident response, secure SDLC, third-party risk, and operational resilience governance requirements.
• Knowledge of ISO 27001, NIST CSF, COBIT, CIS Controls, DORA, NIS2, and related standards.
• Strong analytical, organizational, stakeholder management, and governance reporting skills, with advanced Microsoft Excel and PowerPoint knowledge.
• Excellent knowledge of Italian and English is required.

Nice to have

• ISO 27001, CISA, CRISC, Security+, or equivalent professional certification.

Culture & Benefits

• Permanent employment contract.
• Italian National Collective Labour Agreement for the Metalworking Industry (CCNL Metalmeccanico).
• Opportunity to work within an international technology group serving the financial services industry.
• Exposure to enterprise-wide cybersecurity governance activities in a dynamic, international environment.