Re: Vulnerability Mitigation Management

Since you work for a large corporation, I'd be really surprised if
they don't already have some kind of issue-tracking software in the
company that you could leverage for your needs.  If you ask enough
people enough questions, I'll bet you'll find something's already in
place.

Depending on your needs, a simple database might work fine.  

If not, most of the COTS vulnerability management vendors have (or
will soon have) ticketing systems as part of their software. 
Foundstone definitely does.  Event correlation vendors such as
ArcSight have ticketing systems as well.  These will typically
integrate with large vendors such as Remedy, so the security tool can
create a ticket and then push it to Remedy.

One note of caution, be prepared for some resistance if you have
long-term plans for managing people's daily tasks with a ticketing
system.  Many professionals (not just security folks)  who have not
been tied to a ticketing system in the past can often find it
difficult to adapt.