Professional, Sr. Cyber Metrics Analyst

Zinnov is hiring for the role of Professional, Sr. Cyber Metrics Analyst on behalf of our Global MNC MedTech client company a company where technology sits at the centre of everything: powering how the core business operates day to day and shaping the products and digital solutions that will define the future of patient care. This role is part of the companys establishment of their new India Global Capability Centre (GCC) in Bengaluru which will drive enterprise technology, digital transformation and innovation for its global operations and contributing to technology that ultimately helps millions of people around the world.

How you'll make an impact

• Define and maintain cybersecurity KPIs, KRIs, control-effectiveness measures, thresholds, data definitions, ownership, and reporting cadence aligned to enterprise risk priorities.
• Build executive and operational dashboards using Power BI, Tableau, or equivalent platforms, applying strong data storytelling and drill-down design practices.
• Collect, normalize, validate, and reconcile data from SIEM, vulnerability, IAM, endpoint, cloud, GRC, and control-monitoring platforms using SQL, APIs, Power Query, Python, or equivalent methods.
• Integrate data from tools such as Microsoft Sentinel / Splunk, Qualys / Tenable / Rapid7, Microsoft Defender / CrowdStrike, ServiceNow IRM / Archer, Entra ID, or comparable enterprise security platforms.
• Perform trend, variance, root-cause, and risk analysis to explain changes in security posture and identify systemic control or remediation issues.
• Automate recurring security metrics pipelines, quality checks, refreshes, and reporting workflows to improve timeliness, repeatability, and auditability.
• Map metrics to NIST CSF 2.0, ISO 27001, enterprise risk taxonomies, regulatory requirements, and control objectives to improve governance and assurance.
• Support audit, regulatory, and leadership requests with traceable evidence, clear definitions, and consistent reporting of control performance.
• Coach analysts and partner with domain owners to continuously improve measurement practices, data quality, and decision usefulness.

What you'll bring

Skills Required:

• 5+ years of Experience in cybersecurity, GRC, IT risk, security operations, or cyber analytics with a strong focus on metrics, reporting, or data analysis.
• Hands-on experience with Power BI, Tableau, or equivalent dashboarding/visualization tools and strong data-storytelling skills.
• Strong data-analysis capability using Excel/Power Query, SQL, Python, APIs, or equivalent tools for aggregating and validating security data.
• Working knowledge of cybersecurity domains such as vulnerability management, IAM, threat detection, endpoint security, cloud security, and control assurance.
• Experience defining KPIs/KRIs, data definitions, measurement logic, thresholds, dashboards, and executive reporting.
• Familiarity with NIST CSF, ISO 27001, CIS Controls, or comparable cybersecurity/risk frameworks.
• Strong analytical, root-cause, communication, documentation, and senior-stakeholder presentation skills.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Analytics, or a related field.

Preferred:

• Experience integrating and automating data from SIEM, vulnerability, EDR, IAM, cloud-security, or GRC platforms.
• Experience with audit/regulatory reporting in healthcare, medical device, life sciences, or another regulated environment.
• CISSP, CISA, CRISC, Security+, Power BI, Tableau, or data/analytics certifications.