Location : Bengaluru, India

Experience : 5+ years

Roles and Responsibilities :

- Define and maintain cybersecurity KPIs, KRIs, control-effectiveness measures, thresholds, data definitions, ownership, and reporting cadence aligned to enterprise risk priorities.
- Build executive and operational dashboards using Power BI, Tableau, or equivalent platforms, applying strong data storytelling and drill-down design practices.
- Collect, normalize, validate, and reconcile data from SIEM, vulnerability, IAM, endpoint, cloud, GRC, and control-monitoring platforms using SQL, APIs, Power Query, Python, or equivalent methods.
- Integrate data from tools such as Microsoft Sentinel / Splunk, Qualys / Tenable / Rapid7, Microsoft Defender / CrowdStrike, ServiceNow IRM / Archer, Entra ID, or comparable enterprise security platforms.
- Perform trend, variance, root-cause, and risk analysis to explain changes in security posture and identify systemic control or remediation issues.
- Automate recurring security metrics pipelines, quality checks, refreshes, and reporting workflows to improve timeliness, repeatability, and auditability.
- Map metrics to NIST CSF 2.0, ISO 27001, enterprise risk taxonomies, regulatory requirements, and control objectives to improve governance and assurance.
- Support audit, regulatory, and leadership requests with traceable evidence, clear definitions, and consistent reporting of control performance.
- Coach analysts and partner with domain owners to continuously improve measurement practices,



data quality, and decision usefulness.

Skills Required :

- 5+ years of Experience in cybersecurity, GRC, IT risk, security operations, or cyber analytics with a robust focus on metrics, reporting, or data analysis.
- Hands-on experience with Power BI, Tableau, or equivalent dashboarding/visualization tools and strong data-storytelling skills.
- Strong data-analysis capability using Excel/Power Query, SQL, Python, APIs, or equivalent tools for aggregating and validating security data.
- Working knowledge of cybersecurity domains such as vulnerability management, IAM, threat detection, endpoint security, cloud security, and control assurance.
- Experience defining KPIs/KRIs, data definitions, measurement logic, thresholds, dashboards, and executive reporting.
- Familiarity with NIST CSF, ISO 27001, CIS Controls, or comparable cybersecurity/risk frameworks.
- Strong analytical, root-cause, communication, documentation, and senior-stakeholder presentation skills.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Analytics, or a related field.

Preferred :

- Experience integrating and automating data from SIEM, vulnerability, EDR, IAM, cloud-security, or GRC platforms.
- Experience with audit/regulatory reporting in healthcare, medical device, life sciences, or another regulated environment.
- CISSP, CISA, CRISC, Security+, Power BI, Tableau, or data/analytics certifications.

📌 Senior Cyber Metrics Analyst (India)
🏢 Tidyhire
📍 India