1. A computer-implemented method comprising: determining vulnerability data describing vulnerabilities of an information technology environment by scanning a plurality of computing devices coupled to a network for the vulnerabilities using a plurality of network scanners; generating, using one or more hardware processors, risk tickets using the vulnerability data, each risk ticket including one or more remediation operations for remediating one or more of the vulnerabilities; assigning, in a data store using the one or more hardware processors, each risk ticket to a corresponding stakeholder identifier associated with a stakeholder based on an association of one or more predetermined skills of the stakeholder with the one or more remediation operations for remediating the one or more of the vulnerabilities of the risk ticket; receiving, using the one or more hardware processors, a remediation proposal from the stakeholder of a first vulnerability for remediating the first vulnerability; and obtaining, using the one or more hardware processors, an approval for the remediation proposal to remediate the first vulnerability as proposed.