Senior Manager, Cybersecurity Metrics and Reporting

Bring your heart to CVS Health. Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand — with heart at its center — our purpose sends a personal message that how we deliver our services is just as important as what we deliver.
 
Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable.

Position Summary

The Senior Manager, Cybersecurity Metrics and Reporting plays a crucial role in establishing a centralized capability, governance model, robust dashboard portfolio, and metrics and reporting standard of excellence for the Information Security organization.  Create and use impactful metrics, reporting, and data visualizations to drive consistent messaging and effectively communicate the cybersecurity landscape and posture with various stakeholders.  This position requires a blend of cybersecurity expertise and analytical skills to drive strategic discussions around metrics, data, and reporting solutions.

Responsibilities include, but are not limited to:

Strategy and Metric Development:

• Develop and execute the Cybersecurity Metrics and Reporting Standards Strategy.  Anticipate stakeholder objectives and needs to effectively execute the strategy.

• Define and implement key cybersecurity metrics aligned with industry frameworks (e.g., NIST, ISO 27001).

Governance, Standards, & Process Improvement:

• Develop and implement cybersecurity metrics and reporting standards of excellence for the organization.

• Design a capability model structured to facilitate an efficient flow of information and integrate reporting functions to enhance data driven decision-making and accountability.

• Establish robust stakeholder management and act as a liaison capturing reporting needs, experience design, and prioritizing report and dashboard delivery.

• Evaluate and improve cybersecurity dashboards and reporting processes based on feedback & evolving requirements.

• Develop automated data collection and reporting processes to streamline metrics analysis workflows.

• Provide ad hoc support on information security goals and initiatives, where needed.

Data Collection, Analysis, and Insights:

• Collect, analyze, and interpret large datasets to derive meaningful insights, trends, and patterns in cybersecurity metrics.

• Provide executive level insights and visualizations that drive informed decision-making, effectively communicate the cybersecurity landscape, and enhance the overall cybersecurity posture.

Reporting and Visualization:

• Create comprehensive reports and dashboards using data visualization tools to present key cybersecurity metrics to leadership and stakeholders.

• Design and build cybersecurity metrics and reporting dashboards using industry-leading tools and technologies.

• Translate complex technical metrics into easily understandable and impactful visualizations and reporting formats.

• Stay updated on emerging trends & best practices in cybersecurity metrics & reporting.  Ensure cybersecurity metrics align with relevant industry regulations and compliance requirements.

Coaching / Mentoring:

• Coach and mentor more junior staff members of the team.

Required Qualifications

8+ years of metrics and reporting, data and analytics, dashboard visualization, cybersecurity, or related experience, including but not limited to:

• Metric development

• Data collection and analysis

• Reporting and visualization

• Reporting and dashboard tool proficiency (e.g., Power BI, Tableau)

Preferred Qualifications

Knowledge of:

• Cybersecurity frameworks, industry, and regulatory standards (e.g., NIST, SOX, SOC, HIPAA, PCI, HITRUST)

• Cybersecurity and risk management concepts, including risk quantification and cyber controls

Skill in:

• Industry leading reporting and data visualization tools

• Verbal and written communication - ability to interact and communicate confidently and effectively at all levels of the enterprise, including Executive and Senior Leadership.

• Problem-solving

• Analytical

• Highly organized and detail orient