Professional, Sr. Cyber Metrics Analyst

Zinnov Management Consulting; Bengaluru; Hybrid; INR 2,800,000 - 4,200,000; Full time

Job summary

Zinnov Management Consulting is hiring a Professional, Sr. Cyber Metrics Analyst to join their new India Global Capability Centre in Bengaluru.

You will drive security metrics and governance for a MedTech client, shaping how risk is measured across enterprise security. You will build dashboards, integrate data from SIEM, vulnerability, IAM, cloud and GRC tools, and partner with domain owners to improve measurement practices and reporting.

Qualifications

• 5+ years of experience in cybersecurity, IT risk, or related fields.
• Experience building dashboards with Power BI or Tableau.
• Proficient in Excel/Power Query, SQL, Python, and APIs.
• Knowledge of vulnerability management, IAM, threat detection, and cloud security.
• Experience defining KPIs/KRIs and executive reporting.
• Familiarity with NIST CSF, ISO 27001, CIS Controls.
• Bachelor's degree in CS/IT/Cybersecurity/Data Analytics or related field.

Responsibilities

• Define and maintain cybersecurity KPIs, KRIs, and reporting cadences.
• Build executive dashboards using Power BI or Tableau with data storytelling.
• Ingest and reconcile data from SIEM, vulnerability, IAM, endpoint, and cloud tools.
• Integrate data from MS Sentinel, Splunk, Qualys/Tenable/Rapid7, Defender/CrowdStrike.
• Perform trend, root-cause, and risk analyses on security posture.
• Automate recurring metrics pipelines and reporting workflows.
• Map metrics to NIST CSF 2.0, ISO 27001, and other control objectives.
• Support audit/regulatory requests with traceable evidence.
• Coach analysts to improve measurement practices.

Skills

Power BI

Tableau

Excel/Power Query

SQL

Python

APIs

Data storytelling

Cybersecurity metrics

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Analytics, or a related field

Tools

SIEM

Splunk

Microsoft Sentinel

Qualys

Tenable

Rapid7

ServiceNow IRM

Archer

Entra ID

CrowdStrike

GRC platforms

Job description

Zinnov is hiring for the role of Professional, Sr. Cyber Metrics Analyst on behalf of our Global MNC MedTech client company a company where technology sits at the centre of everything: powering how the core business operates day to day and shaping the products and digital solutions that will define the future of patient care. This role is part of the companys establishment of their new India Global Capability Centre (GCC) in Bengaluru which will drive enterprise technology, digital transformation and innovation for its global operations and contributing to technology that ultimately helps millions of people around the world.

How you'll make an impact

• Define and maintain cybersecurity KPIs, KRIs, control-effectiveness measures, thresholds, data definitions, ownership, and reporting cadence aligned to enterprise risk priorities.
• Build executive and operational dashboards using Power BI, Tableau, or equivalent platforms, applying strong data storytelling and drill-down design practices.
• Collect, normalize, validate, and reconcile data from SIEM, vulnerability, IAM, endpoint, cloud, GRC, and control-monitoring platforms using SQL, APIs, Power Query, Python, or equivalent methods.
• Integrate data from tools such as Microsoft Sentinel / Splunk, Qualys / Tenable / Rapid7, Microsoft Defender / CrowdStrike, ServiceNow IRM / Archer, Entra ID, or comparable enterprise security platforms.
• Perform trend, variance, root-cause, and risk analysis to explain changes in security posture and identify systemic control or remediation issues.
• Automate recurring security metrics pipelines, quality checks, refreshes, and reporting workflows to improve timeliness, repeatability, and auditability.
• Map metrics to NIST CSF 2.0, ISO 27001, enterprise risk taxonomies, regulatory requirements, and control objectives to improve governance and assurance.
• Support audit, regulatory, and leadership requests with traceable evidence, clear definitions, and consistent reporting of control performance.
• Coach analysts and partner with domain owners to continuously improve measurement practices, data quality, and decision usefulness.

What you'll bring

Skills Required:

• 5+ years of Experience in cybersecurity, GRC, IT risk, security operations, or cyber analytics with a strong focus on metrics, reporting, or data analysis.
• Hands-on experience with Power BI, Tableau, or equivalent dashboarding/visualization tools and strong data-storytelling skills.
• Strong data-analysis capability using Excel/Power Query, SQL, Python, APIs, or equivalent tools for aggregating and validating security data.
• Working knowledge of cybersecurity domains such as vulnerability management, IAM, threat detection, endpoint security, cloud security, and control assurance.
• Experience defining KPIs/KRIs, data definitions, measurement logic, thresholds, dashboards, and executive reporting.
• Familiarity with NIST CSF, ISO 27001, CIS Controls, or comparable cybersecurity/risk frameworks.
• Strong analytical, root-cause, communication, documentation, and senior-stakeholder presentation skills.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Analytics, or a related field.

Preferred:

• Experience integrating and automating data from SIEM, vulnerability, EDR, IAM, cloud-security, or GRC platforms.
• Experience with audit/regulatory reporting in healthcare, medical device, life sciences, or another regulated environment.
• CISSP, CISA, CRISC, Security+, Power BI, Tableau, or data/analytics certifications.