Director - IT Security Reporting and Metrics

My client, an International Financial Services firm, based in London are looking for a Director of IT Security Reporting and Metrics. They need candidates from Financial Services and you will be required to work in the office two days per week.

About the Director of IT Security Reporting and Metrics:

What you will be doing:

• Lead the new Security Reporting and Metrics team within IT Security Governance and Management, ensuring it has an effective operating model, processes, roles, and responsibilities
• Provide the strategic development and delivery of executive-levelcybersecurity reporting and metrics, ensuring actionable insights and alignment with business objectives, for example,
  • Detailed and consolidated reports on my client's security posture, capabilities, and risk landscape for executive leadership and the Board, in coordination with the Office of the Chief Information Officer (oCIO).
  • Translating complex technical information into actionable business insights.
• Direct the measurement, monitoring, and reporting of security risks and performance, ensuring transparency, accountability, and continuous improvement, for example,
  • Measurement and reporting of security risks (e.g., progress of remediation efforts, identification and communication potential risks impacting completion etc).
  • Establishing and overseeing the monitoring and reporting of Key Performance Indicators (KPIs) for all IT Security-owned processes and services, defining performance criteria and setting benchmarks.
  • Periodic reporting to IT Security leadership.
• Drive continuous improvement in reporting methodologies, data visualisation, and communication strategies to enhance clarity, accuracy, and impact of security communications across all levels of the organisation.
• Oversee and foster strategic collaboration with multiple departments and teams (e.g., IT Security team leads, oCIO) to ensure data accuracy, consistency, and relevance in all security reporting, promoting a data-driven approach to security management.

What we’re looking for:

A security leader who can:

• Lead the Security Reporting and Metrics team, driving innovation and ensuring the team has a clear understanding of its roles and responsibilities, and how they contribute and align to my client's overall IT Security Function.
• Lead Security Reporting and Metrics transformation programs and implement robust reporting and analytics solutions that establish a strong foundation for my client's IT Security Function.
• Identify Security Reporting and Metrics priorities to establish and strengthen a robust security team, by focusing efforts on tailoring work and programs for my client's specific needs.
• Leverage multiple core relevant tools and solutions (e.g., Business Intelligence tools, data visualisation tools etc) to provide actionable insights into my client's security posture.

Professional qualifications / certifications

• Experience in security reporting, risk management, or data analytics (12-15 years), including ~8-10 years in a leadership or management role focused on security reporting and metrics.
• Experience in:
  • Leading team adherence to operational and compliance standards within highly regulated environments.
  • Reporting on team performance and project progress to senior management, translating technical insights.
  • Representing the team in governance forums or committees, providing expert input and driving outcomes.
• Understand, interpret and apply regulatory requirements, compliance and industry standards as pertains to Security Reporting and Metrics.

If the above is of interest please apply to this advertisement, email me on darius.goodarzi@robertwalters.com or call me on 0207 509 8040 to find out more.

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates