About ION
We are a Software Product Companywith a global footprint in the FinTech sector. With more than 10,000 professionals across 40+ offices worldwide, we provide solutions combining trading and workflow automation,market data, and advanced business intelligence.
Your duties and responsibilities
1. Support design and execution of the information security risk management framework
2. Work with Legal, Risk and IT to ensure compliance with NIS2, DORA and/or ISO27K where relevant.
3. Maintain and improve policies, standards and control documentation aligned to regulatory and client obligations.
4. Assist with internal and external audits, client due diligence and exception management.
5. Support product and engineering teams in adopting DevSecOps and secure design principles.
6. Act as point of escalation during major incidents or zero-day threats for the in-scope entity.
7. Lead and continuously improve our detection and response capabilities for the specific entity.
8. Serve as a senior incident responder, addressing emerging threats across the environment.
9. Collaborate with infrastructure, network, and cross-functional teams to contain, investigate, and remediate security incidents.
10. Conduct root cause analysis and participate in forensic investigations as needed.
11. Enhance system visibility by expanding logging coverage and implementing additional monitoring capabilities.
12. Maintain, update, and regularly test incident response runbooks, containment strategies, and escalation protocols.
13. Lead the end-to-end vulnerability management process for ION Markets systems, from identification to remediation.
14. Provide support for security architecture reviews of developed systems to ensure alignment with best practices.
15. This role may require some overnight, weekend and on-call activities.
Your skills, experience, and qualifications
16. Fluency in Italian and English, as the role requires regular interaction with internal stakeholders, regulatory bodies and clients in the Italian Market
17. Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include:
18. Security+, OSCP, CCSP, CEH, GCIH, GMON
19. 7+ years' experience in Information Security with proven experience in operations & compliance roles.
20. Must have fundamental programming/scripting capabilities ( python, PowerShell, bash, etc.)
21. Familiarity with NIS2 / DORA and external regulations.
22. Strong understanding of ISO27K
23. A team player with the ability to work independently and unsupervised
24. Ability to own delegated tasks and see them through to completion
25. Ability to manage time and prioritize work to maximize productivity
26. Excellent communication skills (both written and verbal)
27. Exceptional attention to detail and quality
28. Excellent problem-solving techniques and trouble analysis skills
29. Endpoint security concepts, controls, and best practices for Servers ( Windows and Linux)
30. General IT networking concepts, protocols, standards and network security concepts, controls, and best practices
31. Cryptography fundamentals and data security controls and best practices
32. Forensic investigation techniques
33. Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security ( AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, vulnerability management, MDM, etc.
Pursuant to Italian Law (, candidates registered on the disability list will be given priority. Only candidates meeting the selection criteria will be contacted. Please apply only if you currently hold full legal right to work in Italy.