Analyst – Sr. Information Security Metrics & Reporting

Position Overview Sr. Information Security Analysts focused on metrics, reporting, and executive-level data quality for the Chief Information Security Office (CISO). This role supports the ERMA (Executive Reporting & Data Analytics) team by collecting, validating, and reporting security metrics used by leadership to make data-driven decisions. The ideal candidate is detail-oriented, curious, and committed to accuracy. This is not a passive reporting role — we need someone who genuinely cares about data integrity and wants to help improve processes, build reporting decks, and enhance executive visibility into security performance. Why This Role Is Open • Increased need for metrics transparency and leadership visibility • Backfill of the former lead analyst who supported this function • Team expansion to gain added support with weekly/monthly reporting and dashboard builds Impact of the Role This role directly contributes to executive reporting for the CISO, ensuring that metrics used for strategic decisions are accurate, timely, and meaningful. You will be a key contributor in improving our reporting quality, dashboards, and data governance practices. Key Responsibilities • Collect and validate weekly and monthly security metrics and KPIs • Pull and analyze data from systems such as XSOR, Tableau, Power BI, Confluence, and SharePoint • Build reporting decks and executive summaries for senior leadership • Perform data integrity and quality checks; ensure accurate case classification and notes • Track mean-times, case volume, and other operational security metrics • Assist with process documentation and document management • Collaborate closely with Leadership and the S&E team • Support migration of reports/dashboards from Tableau to Power BI • (Optional) Assist with policy governance documentation using the PGP platform • Participate in scrum or agile cadences as needed Required Skills (Top Must-Haves) • XSOR experience (or similar case/incident management tools) • Advanced Excel (pivot tables, formulas, data quality checks) • Power BI & Tableau reporting experience • Strong attention to detail and data accuracy • Ability to ensure correct reporting of metrics used by executives Nice-to-Have Skills • Documentation management (Confluence, SharePoint) • Experience with PGP policy governance platform • Technical writing background • Incident response communication experience • Information Systems degree or software development exposure Soft Skills • Highly detail-oriented and accuracy-driven • Strong communication skills (daily interaction with leadership and peers) • Proactive, willing to learn, eager to improve processes • Someone who cares about the quality of their work — not just “checking the box” Certifications (Preferred) • IT or Cybersecurity certifications (e.g., Security+, GSEC, CISSP associate)