Sr. Staff, Cybersecurity Risk

Essential Responsibilities:

• Recognized as a security governance, risk, and compliance expert, independently addressing the most complex security risks and providing strategic direction on risk mitigation and governance practices across the security domain.
• Define methods and procedures for new or special assignments, collaborating with cross-functional teams to drive security risk and governance initiatives that align with business needs and objectives.
• Lead complex, high-impact security governance and risk management initiatives, leveraging a deep understanding of business trends and security challenges to develop innovative risk mitigation strategies and solutions.
• Possess a keen awareness of the broader impact of decisions, with initiatives driving enterprise-wide improvements in risk management and security governance, enhancing overall security practices and operational efficiency.
• Lead a security risk and governance team; set clear priorities and define actionable plans, ensuring alignment with organizational goals.
• Guide team members through complex challenges, fostering their growth and development while maintaining a focus on high-impact results.

Minimum Qualifications:

• 8+ years relevant experience and a Bachelor’s degree OR Any equivalent combination of education and experience.

• Proven experience owning or running a technology, cyber, or risk metrics and reporting program - not only building dashboards, but managing the program, its roadmap, and its stakeholders.
• Excellent communication and presentation skills, with the ability to translate complex data into clear insights and prepare senior-management-ready reporting.
• Strong working knowledge of technology and cybersecurity risk concepts, control frameworks and best practices (e.g., NIST, ISO 27001, COBIT, ITIL), and the ability to connect control objectives to measurable indicators.
• The judgment to understand what data drives a metric - what exists, what’s missing, and what would make it better - and the ability to partner with and direct analysts, developers, and automation to build and deliver it. Working closely with data and dashboard professionals to shape solutions is a core part of the role.
• Demonstrated ability to operate autonomously: manage multiple priorities, lead initiatives independently, make sound decisions, and drive execution and continuous improvement with limited oversight.
• Experience working across cross-functional teams and influencing alignment without direct authority, in a dynamic, global, matrixed environment.
• A strong orientation toward documentation, governance, and audit-readiness - ideally with experience supporting or preparing for internal or regulatory audits and closing process gaps.
• Working familiarity with reporting and automation tooling (e.g., Power BI, SQL, or other automated solutions) - enough to partner effectively with data professionals and shape solutions, without needing to build them yourself.
• Collaboration and mentoring experience - comfortable sharing expertise and elevating peers, with or without direct reports.
• Bachelor’s or Master’s degree in a relevant field (e.g., cybersecurity, information systems, data science, statistics, risk management, business, or a related discipline); equivalent experience considered.
• Typically 7+ years in technology or cyber risk / performance metrics and reporting, including experience operating at a senior level.

Your Day-to-Day:

Own and run the metrics program

• Own end to end the operations, roadmap, and delivery of the 1LoD Technology and Cyber Risk and Performance Metrics program, including KPIs and KRIs, from intake through published reporting.
• Operate autonomously and drive execution independently - setting priorities, running working sessions, and making the routine and program-level decisions the role requires without needing leadership in every meeting; escalating the genuinely advanced, ambiguous, or high-stakes items for support.
• Build and maintain the program roadmap, sequencing metric development and improvements against business priorities and stakeholder needs.

Understand the metrics and the data behind them

• Know what each metric measures, why it matters, and how it should move - so you can speak to any number with confidence and represent it upward.
• Identify what data exists and, just as importantly, what data is missing or weak, and work hands-on with technical partners (analysts, developers, and automation) to close those gaps and make the metric better.
• Dive into domains deeply enough to understand the shortcomings and limitations of each metric, and ensure those limitations are documented and clearly communicated.
• Monitor metrics, investigate anomalies, and escalate where appropriate.

Ensure audit-readiness (top to bottom)

• Maintain full, current, and auditable documentation of every metric - definitions, data lineage, sources, methodology, thresholds, and ownership - so the program is defensible top to bottom.
• Identify and close reporting process gaps proactively.
• Partner with data owners and oversight partners to keep data definitions, quality checks, and evidence audit-ready on an ongoing basis.

Orchestrate cross-functional partners

• Build trusted relationships across the various business and technology partners, becoming intimately knowledgeable of their processes and data.
• Influence alignment on metrics, thresholds, and reporting standards across teams where you have influence rather than direct authority, driving to consensus and clear ownership.
• Serve as the connective tissue between the data owners who produce the inputs and the leaders and oversight partners who consume the outputs.

Deliver reporting and drive improvement

• Produce executive-level dashboards, reporting, and data storytelling that make complex technical and risk metrics clear to varied audiences, up through senior leadership.
• Identify opportunities to automate and streamline manual reporting, data aggregation, and refreshes - partnering with dashboard and data professionals to create solutions using tools such as Power BI, SQL, or other automated solutions - to improve accuracy, timeliness, and repeatability.
• Foster a culture of continuous improvement, and share your expertise to raise the capability of the broader team and partners.