As a Cybersecurity Metrics Analyst, you will be pivotal in fortifying our organization's security posture. Your primary responsibility will be to analyze, measure, and report on various cybersecurity metrics, driving our decision-making processes and enhancing our overall risk management efforts. Your expertise will be instrumental in guiding our security strategies and ensuring compliance with industry standards.
Responsibilities
- Security Fundamentals. Exhibit a deep understanding of information security fundamentals and a risk-based approach to cybersecurity.
- Metrics Process Management. Oversee the end-to-end security metrics process, including the collection, tracking, and reporting of metrics, with clear ownership and responsibility for each phase.
- Metric Development. Define, develop, and implement cybersecurity metrics in alignment with industry frameworks such as NIST CSF, NIST 800-53, ISO27001, PCI, and Privacy.
- Automation and Visualization. Develop automated tools for calculating metrics and create visualization tools for effective reporting.
- Data Analysis. Utilize industry-leading tools for data analysis and reporting, including complex macros and scripts for data mining from multiple sources.
- Data Management. Identify, obtain, and cleanse relevant data consistently to design and produce insightful reports and dashboards on our cybersecurity posture.
- Stakeholder Collaboration. Work closely with stakeholders to tailor metrics based on business objectives, risk appetite, and regulatory requirements.
- Visualization Expertise. Create elegant and interactive data visualizations of complex information with drill-down capabilities.
- Reporting. Design and produce advanced security and compliance metrics and dashboards for senior management.
- Technical Skills. Leverage advanced skills in Microsoft PowerPoint, Publisher, and application development in environments like .NET, Cold Fusion, and LAMP.
- Scripting. Utilize scripting languages (Python, Perl, Bash, PHP) for various tasks.
Qualifications
- Education. Bachelor's degree in a relevant field, preferably with a focus on technology or data analysis and visualization.
- Experience. Minimum of 5 years of experience in a similar role.
- Certifications. Relevant IT and Information Security certifications such as CISSP, CISM, CISA, or similar are highly desirable.
- Tools Expertise. Proficiency in data analysis and visualization tools such as Microsoft Power BI, Tableau, Alteryx, QlikSense/QlikView, or similar.
- Industry Knowledge. Experience with IT security standards and control frameworks is preferred. Previous experience in manufacturing, IT, or consulting industries is advantageous.
Skills
- Analysis & Evaluation. Strong analytical and assessment skills.
- Consulting & Organization. Excellent consulting abilities and organizational skills.
- Problem Resolution. Effective at problem identification and resolution.
- Technology Proficiency. Knowledge of database and application security, network administration reporting, network communications technologies, server security policies and procedures, and access management.
- Technical Documentation. Ability to produce comprehensive technical documentation.
Preferred Education and Experience
- Education. Bachelor's degree.
- Experience. 5 years in a related role.
Apply Now
If you are passionate about cybersecurity metrics and have a strong background in data analysis and visualization, we encourage you to apply. Join us and be a key player in shaping our organization's security strategy and ensuring our compliance with industry standards.