Information Security Specialist, Cyber Metrics

Job Title: Information Security Specialist, Cyber Metrics

Location: Toronto, ON

Estimated Duration: Full Time/Permanent

What you'll do
Reporting to the Manager, Cyber Risk Reporting and Cyber Culture, the Cyber Info Security Specialist works with the Senior Lead, Cyber Risk Reporting, and will be responsible for  collecting and gathering data from different stakeholders, inputting data from various sources into forms and spreadsheets, constructing a database/ repository, and then feed this data into visualization tools and dashboards. May also provide inputs to board metrics and other compulsory reporting. Responsibilities may include:

• Working with teams across Cyber and IT to define and gather data for meaningful cybersecurity metrics
• Mapping cybersecurity metrics to adopted risk frameworks
• Designing operational dashboards for Cyber teams that will assist in prioritization of work according to risk and urgency
• Designing executive-level dashboards that will assist in making risk-based investment decisions
• Ensuring data and visualizations are accurate, timely and meaningful to the overall cyber program
• Automating data collection, validation, and preparation where possible
• Automating dashboard updates where possible—and where not, creating and following a schedule to manually update them
• Working with internal teams to summarize data in executive reports
• Maintaining reporting schedule to ensure timely delivery of reports to high profile stakeholders
• Creating documentation to support maintenance and upkeep of dashboards
• Creating a templated intake and interview process to ensure successful dashboard collaboration with stakeholders

What you bring:

• Experience with Power BI, Python Scripting, Workiva, Power Query, SQL Database, VBA, Azure/AWS/GCP
• Data analysis skills including data validation, data preparation, and data cleansing
• Ability to manage time effectively to meet critical deadlines
• Strong understanding of cyber security concepts, domains, and risk in those domains
• Strong writing and verbal skills
• Experience working in data visualization tools like Tableau, Power BI etc.
• Basic knowledge of information theory
• Experience with creating and automating Power BI dashboards
• Ability to communicate effectively at all levels from technical staff to company leadership
• Experience presenting technical information in visualizations to a non-technical audience
• Ability to work across groups and to influence change
• Stakeholder management experience including the ability to interview stakeholders, determine what metrics are meaningful to the audience and incorporating feedback
• Fluency in Data Management life cycle (collection, cleaning, storage, analysis, reporting)
• Familiarity with cybersecurity frameworks such as NIST, ISO or COBIT

Tool experience:

• Power BI (required)
• Power Query
• SQL Database