Cybersecurity Metrics & Controls Specialist – Cybersecurity Controls | Risk Metrics | Continuous Controls Monitoring (CC

Cybersecurity Metrics & Controls Specialist – Cybersecurity Controls | Risk Metrics | Technology Risk Job Description Role Summary The Cybersecurity Metrics & Controls Specialist will be responsible for defining, measuring, and reporting on technology and cybersecurity control effectiveness. The role involves working with stakeholders to establish control metrics, analyze data, and support continuous improvement of security control processes. Key Responsibilities • Establish and document Control/Risk metric definitions for technology controls by engaging with stakeholders, understanding processes, and analyzing data for accurate measurement. • Ensure control measurement and metric requirements are aligned with security policies and standards. • Partner with metric consumers to establish reporting frameworks that meet business requirements. • Collaborate with data and tooling teams to support successful implementation of cybersecurity metrics. Required Skills & Experience • 10+ years of experience in Information Security and/or Information Technology. • 5+ years of hands-on experience with technology or cybersecurity control implementations. • Ability to define metrics and Key Control Indicators (KCIs) to demonstrate control implementation completeness. • Strong business acumen and strategic mindset. • Experience understanding and supporting customer or stakeholder requirements. • Strong interpersonal skills with the ability to collaborate across multiple teams and organizational levels. • Ability to manage expectations and handle high-pressure situations with tight deadlines. • Strong analytical skills with the ability to make decisions based on quantitative and qualitative data. • Knowledge of technology controls and cybersecurity domains. • Knowledge of public cloud technologies. • Knowledge of security concepts and tools related to: • Identity & Authentication • Data Security • System Security • Network Security • Application Security • Knowledge of security logging, monitoring, and incident response. • Cybersecurity certifications preferred.

The specialist is responsible for defining, measuring, and reporting on the effectiveness of technology and cybersecurity controls. This includes establishing metric definitions, partnering with stakeholders for reporting frameworks, and collaborating with data teams to implement metrics.

Candidates must have over 10 years of experience in Information Security or IT, with at least 5 years focused on control implementations. Proficiency in cybersecurity domains, cloud technologies, and the ability to define Key Control Indicators is required.

• Data analysisPreferred

Identified from the job description. Confirm important requirements above.

• Cybersecurity Controls
• Risk Metrics
• Continuous Controls Monitoring
• Information Security
• Key Control Indicators
• Data Analysis
• Public Cloud Technologies
• Identity & Authentication
• Data Security
• System Security
• Network Security
• Application Security
• Security Logging
• Incident Response
• Strategic Mindset
• Analytical Skills

• Technology
• Security & Safety
• Data & Analytics
• Consulting

Minimum education

Professional degree

Minimum experience

10+ years

Apply by

Aug 19, 2026

Posting language

English

Working hours

40 hours per week

Seniority

Mid-Senior level

Application method

Direct apply is available