Lead Security Reporting Specialist - 100% US REMOTE

Company Description

About us, but we’ll be brief

We are very proud that FORTUNE named us one of The 100 Best Companies to Work For. In addition, for the last five years we’ve been named in the 100 “World’s Most Innovative Companies” by Forbes Magazine.

When you are the leader, it is always urgent, important, and market changing. We think that defines the true “disruptive” business. Join us and create some chaos for the competition. 

Job Description

The Lead Security Reporting Specialist is responsible for maintaining and advancing the design function of the Experian Metrics and Reporting program.  This encompasses designing and maintaining a security metrics and reporting framework that aligns with industry standards with the goal of providing security and privacy insight across Experian. This role will provide oversight and management of plan team tasks, security design requirements and act as the lead of the metrics and reporting design team. 

Working with internal executives and security leads they will identify metrics to support security governance requirements and help turn reporting requirements into actionable plans that build out our reporting framework and reporting library.  

The supported framework will include linkage between metrics, security controls, policy, and other governance requirements. The role will require regular coordination with senior management to ensure metrics stay relevant, correctly communicate, and work to track security risk. 

This role will facilitate the production of metrics by acting as a key design, scoping, and planning point with internal teams to ensure proposed reporting and implementation projects are thoroughly scoped and designed.  The design lead will conduct reviews against user reporting requests and build design proposals to satisfy security requirements including policy requirements, core strategy, process evaluation and control maturity. 

The lead will be required to review available data models and work with our engineering team to define and scope requirements.  This design and outline will form the basis for our internal security data engineering teams’ backlog and enable us to operationalize and build out production versions of internal security reporting. 

Job Functions 

• Provide specialized expertise to drive solutions and procedural changes as well as provide guidance to other employees. 

• Analyze and review security technologies and platforms implemented across the organization.  

• Reports security metrics to manager and senior leadership on a regular basis. 

• Reports security incidents, define/track corrective actions, and address incidences while keeping management informed.  

• Identify, report, and address risks within work area. 

• Ensure adequate compliance documentation is presentable for external and internal audits.  

• Develop processes and procedures that are to be used by the team to perform operational tasks. 

• Participates in cross-functional project teams to implement security solutions as prioritized by management. 

• Stays up to date on the latest security technologies, risks, threats and vulnerabilities, to ensure security of company systems. 

• Demonstrates excellent presentation skills and develops / presents security findings, changes, processes, etc. to all levels of management across all departments within the company. 

• Ability to multi-task and work within a global team. 

• Mature and build out the design team as part of improving the security metrics and reporting program at Experian. Identify standardized processes to aid reporting design and ensure business use cases are adequately scoped to enable engineering teams to develop and build reporting solutions. 

• Review business and internal requests for new or enhanced security reporting, identify suitable scoping, and design standards to aid engineering teams with building reports to agreed specifications to satisfy executive and stakeholder requirements. 

• Work with security executives and program leaders to identify risk-based security metrics that align with the security program and security risk management. 

• Develop data standards, policies, and procedures to structure the metrics and reporting framework as part of a long-term improvement strategy. 

• Produce scoping documents outlining the requirements for business requests, outlining key requirements, known caveats and critically analyze processes being suggested for use within security metrics and reporting. 

• Maintain the mapping of security metrics to the security