Location : Bengaluru, India

Experience : 5+ years

Roles and Responsibilities :

- Define and maintain cybersecurity KPIs, KRIs, control-effectiveness measures, thresholds, data definitions, ownership, and reporting cadence aligned to enterprise risk priorities.

- Build executive and operational dashboards using Power BI, Tableau, or equivalent platforms, applying strong data storytelling and drill-down design practices.

- Collect, normalize, validate, and reconcile data from SIEM, vulnerability, IAM, endpoint, cloud, GRC, and control-monitoring platforms using SQL, APIs, Power Query, Python, or equivalent methods.

- Integrate data from tools such as Microsoft Sentinel / Splunk, Qualys / Tenable / Rapid7, Microsoft Defender / CrowdStrike, ServiceNow IRM / Archer, Entra ID, or comparable enterprise security platforms.

- Perform trend, variance, root-cause, and risk analysis to explain changes in security posture and identify systemic control or remediation issues.

- Automate recurring security metrics pipelines, quality checks, refreshes, and reporting workflows to improve timeliness, repeatability, and auditability.

- Map metrics to NIST CSF 2.0, ISO 27001, enterprise risk taxonomies, regulatory requirements, and control objectives to improve governance and assurance.

- Support audit, regulatory, and leadership requests with traceable evidence, clear definitions, and consistent reporting of control performance.

- Coach analysts and partner with domain owners to continuously improve measurement practices, data quality, and decision usefulness.

Skills Required :

- 5+ years of Experience in cybersecurity, GRC, IT risk, security operations, or cyber analytics with a strong focus on metrics, reporting, or data analysis.

- Hands-on experience with Power BI, Tableau, or equivalent dashboarding/visualization tools and strong data-storytelling skills.

- Strong data-analysis capability using Excel/Power Query, SQL, Python, APIs, or equivalent tools for aggregating and validating security data.

- Working knowledge of cybersecurity domains such as vulnerability management, IAM, threat detection, endpoint security, cloud security, and control assurance.

- Experience defining KPIs/KRIs, data definitions, measurement logic, thresholds, dashboards, and executive reporting.

- Familiarity with NIST CSF, ISO 27001, CIS Controls, or comparable cybersecurity/risk frameworks.

- Strong analytical, root-cause, communication, documentation, and senior-stakeholder presentation skills.

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Analytics, or a related field.

Preferred :

- Experience integrating and automating data from SIEM, vulnerability, EDR, IAM, cloud-security, or GRC platforms.

- Experience with audit/regulatory reporting in healthcare, medical device, life sciences, or another regulated environment.

- CISSP, CISA, CRISC, Security+, Power BI, Tableau, or data/analytics certifications.