About this role

Define and maintain a cybersecurity metrics framework (KPIs, KRIs, OKRs) that supports executive decision-making
Develop and maintain a data dictionary and standardized definitions for all key metrics
Design and maintain logical and physical data models for cybersecurity reporting
Leverage ServiceNow as a core source of truth for workflow and status metrics
Develop and standardize ServiceNow-based reports, dashboards, and potentially Performance Analytics indicators
Apply best practices in visualization and information design to keep dashboards clear, actionable, and aligned with stakeholder needs
Implement governance for dashboard lifecycle
Partner with the Senior Principal, Vulnerability Management to ensure Tenable
and VM-related metrics align with risk models and program goals
Support Security Leadership in using metrics for planning, prioritization, and communication

6+ years of combined IT, cybersecurity, and/or analytics experience
3–6 years in cybersecurity operations, vulnerability management, or related domains
Significant hands-on experience in reporting, data analysis, and KPI design
Strong experience with ServiceNow (especially VR, CMDB, ITSM tables, and reporting capabilities)
Cybersecurity data sources such as Tenable, Tanium, Splunk, and similar platforms
Experience in healthcare or public-sector environments and familiarity with associated regulatory drivers (preferred)
Prior involvement in building or governing enterprise cybersecurity metrics frameworks (preferred)

Advisor, Program Effectiveness – Cybersecurity Metrics & Reporting

Key skills