Cybersecurity Metrics & Controls Specialist - Cybersecurity Controls | Risk Metrics | Continuous Controls Monitoring (CC

Cybersecurity Metrics & Controls Specialist – Cybersecurity Controls | Risk Metrics | Technology Risk

Job Description

Role Summary

The Cybersecurity Metrics & Controls Specialist will be responsible for defining, measuring, and reporting on technology and cybersecurity control effectiveness. The role involves working with stakeholders to establish control metrics, analyze data, and support continuous improvement of security control processes.

Key Responsibilities

• Establish and document Control/Risk metric definitions for technology controls by engaging with stakeholders, understanding processes, and analyzing data for accurate measurement.

• Ensure control measurement and metric requirements are aligned with security policies and standards.

• Partner with metric consumers to establish reporting frameworks that meet business requirements.

• Collaborate with data and tooling teams to support successful implementation of cybersecurity metrics.

Required Skills & Experience

• 10+ years of experience in Information Security and/or Information Technology.

• 5+ years of hands-on experience with technology or cybersecurity control implementations.

• Ability to define metrics and Key Control Indicators (KCIs) to demonstrate control implementation completeness.

• Strong business acumen and strategic mindset.

• Experience understanding and supporting customer or stakeholder requirements.

• Strong interpersonal skills with the ability to collaborate across multiple teams and organizational levels.

• Ability to manage expectations and handle high-pressure situations with tight deadlines.

• Strong analytical skills with the ability to make decisions based on quantitative and qualitative data.

• Knowledge of technology controls and cybersecurity domains.

• Knowledge of public cloud technologies.

• Knowledge of security concepts and tools related to:

• Identity & Authentication

• Data Security

• System Security

• Network Security

• Application Security

• Knowledge of security logging, monitoring, and incident response.

• Cybersecurity certifications preferred.