Cybersecurity Metrics Analyst

Mindlance - Fort Worth, TX

Full-time

Fort Worth, TX

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Metrics Analyst will play a crucial role in the organization by identifying, measuring, analyzing, and reporting on cybersecurity metrics. This position requires a strong analytical mindset and the ability to work collaboratively with cross-functional teams and stakeholders to gather requirements and ensure the successful implementation of cybersecurity metrics. The analyst will be responsible for pulling, testing, and reporting cybersecurity metrics on a regular schedule to support business requirements, ensuring that the metrics are accurate and of high quality. The ideal candidate will have a solid understanding of various cybersecurity domains and the relevant metrics that apply to them. They will be expected to identify trends, patterns, and anomalies in cybersecurity data, providing insights that can help improve the organization's security posture. Excellent communication and presentation skills are essential, as the analyst will need to convey complex cybersecurity metric concepts to both technical and non-technical stakeholders, including leadership up to the Board level. Familiarity with industry best practices related to cybersecurity metrics and reporting is important, as is knowledge of industry-standard cybersecurity frameworks such as the NIST Cybersecurity Framework or ISO 27001. The role may also involve working in highly-regulated industries, requiring an understanding of applicable regulatory requirements such as TSA, FAA, and PCI DSS. The Cybersecurity Metrics Analyst will be a key player in ensuring that the organization meets its cybersecurity goals and complies with relevant regulations.

Responsibilities

• Identify, measure, analyze, and report on cybersecurity metrics.
• Work with cross-functional teams and stakeholders to gather requirements for cybersecurity metrics.
• Pull, test, and report cybersecurity metrics on a regular schedule to support business requirements.
• Identify trends, patterns, and anomalies in cybersecurity data.
• Communicate complex cybersecurity metric concepts to both technical and non-technical stakeholders.
• Produce accurate and high-quality metrics reports for leadership audience up to the Board level.

Requirements

• Bachelor's degree in computer science, information technology, or a related discipline, or equivalent experience/training.
• 3+ years of experience in identifying, measuring, analyzing, and reporting cybersecurity metrics.
• Ability to work with cross-functional teams and stakeholders to gather requirements and ensure successful implementation of cybersecurity metrics.
• Experience working in multiple cybersecurity domains to develop an understanding of relevant metrics and their implications.
• Excellent analytical and problem-solving skills to identify trends, patterns, and anomalies in cybersecurity data.
• Experience with pulling, testing, and reporting cybersecurity metrics on a regular schedule to support business requirements.
• Excellent communication and presentation skills to effectively communicate complex cybersecurity metric concepts to both technical and non-technical stakeholders.
• Strong attention to detail and ability to produce accurate and high-quality metrics reports for leadership audience up to the Board level.
• Familiarity with industry best practices related to cybersecurity metrics and reporting.
• Knowledge of industry-standard cybersecurity frameworks, such as NIST Cybersecurity Framework or ISO 27001.

Nice-to-haves

• Proficiency in using data analysis and visualization tools e.g. MS Office, PowerBI.
• Familiarity with cybersecurity risk assessment methodologies and tools.
• Familiarity with the various tools and technologies leveraged within cybersecurity and information technology programs from which metric data is collected.
• Knowledge of applicable regulatory requirements (e.g., TSA, FAA, PCI DSS).
• Experience working in highly-regulated industries such as finance, healthcare, or government.