IT&Data Performance & Governance Manager (Cybersecurity Metrics)

Education:

Bachelor's degree in Information Security, Computer Science, Data Analytics, Business Management, or related field.

Experience:

8+ years of experience in Cybersecurity, Data Analytics, Performance Management, Governance, or Risk Management.

3+ years in Product Owner, Performance Lead, Governance Lead, or similar leadership roles.

Experience working within a CISO organization.

Proven track record building enterprise-wide KPI and reporting frameworks.

Technical Knowledge - Strong understanding of:

Cybersecurity operations and risk management

NIST CSF, ISO 27001, CIS Controls

Security Operations Center (SOC)

Vulnerability Management

Identity & Access Management

Cloud Security

Governance, Risk & Compliance (GRC)

Security Performance Metrics and KRIs

Data visualization and analytics platforms

Preferred Tools:

Power BI

Performance & Metrics Strategy

Define and own the Cybersecurity Performance Measurement Strategy aligned with CISO objectives and enterprise priorities.

Establish a comprehensive framework of KPIs, KRIs, OKRs, and maturity indicators across cybersecurity domains.

Develop a multi-year roadmap for cybersecurity metrics, dashboards, and reporting capabilities.

Ensure performance metrics support regulatory, audit, risk management, and executive reporting requirements.

Metrics Product Ownership

Act as Product Owner for the cybersecurity metrics platform and reporting ecosystem.

Manage the backlog for reporting, dashboard, and analytics enhancements.

Prioritize requirements based on business value, risk visibility, and stakeholder needs.

Define data models, metric definitions, governance standards, and quality controls.

Executive Reporting & Insight Generation

Deliver executive-level dashboards and performance reviews for the CISO, CIO, Risk Committees, and senior leadership.

Translate technical cybersecurity data into clear business insights and recommendations.

Lead monthly and quarterly cybersecurity performance reviews.

Provide trend analysis, forecasting, benchmarking, and data-driven improvement recommendations.

Data Governance & Analytics

Establish metric governance processes, ensuring consistency and integrity across reporting.

Collaborate with Security Operations, GRC, Risk Management, Identity, Architecture, Vulnerability Management, and Engineering teams to define data requirements.

Drive automation of data collection, reporting, and performance tracking.