Cyber Security Metrics Program Manager

Sentara Health; Virginia Beach (VA); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans

401k with employer match

Paid Time Off

Job summary

Sentara Health in Virginia Beach seeks a Cyber Security Metrics Program Manager to build and sustain an enterprise metrics program that translates cyber performance into actionable dashboards for executives and key stakeholders.

You will define meaningful metrics, establish reliable data sources, automate reporting workflows, and translate complex cyber data into decision-ready narratives that support Sentara’s resilience and patient safety priorities.

Qualifications

• High School / GED is required.
• Bachelor’s Degree preferred in IT, Cyber Security, Data Analytics, or related field.
• 6+ years in program management, cyber security, data analytics, or related tech delivery.
• Hands-on experience with Power BI, Power Automate, and Microsoft 365 is required.

Responsibilities

• Define, manage, and mature the Cyber Security Metrics Program aligned with enterprise strategy.
• Develop a metrics roadmap to support executive reporting and leadership decision‑making.
• Coordinate across cyber pillars, IT, business stakeholders, and control owners for accurate, timely metrics.
• Create dashboards and visual storytelling to communicate cyber posture, trends, and risks to leadership.

Skills

Program management

Data analytics

Executive storytelling

Stakeholder management

Education

Bachelor’s Degree in IT or related field

High School / GED

Tools

Power BI

Power Automate

Microsoft 365

Reporting tools

Job description

Cyber Security Metrics Program Manager

The Cyber Security Metrics Program Manager is responsible for building, maturing, and sustaining an enterprise Cyber Security Metrics Program that provides meaningful, actionable, and visually compelling insights for executive leadership, cyber leadership, control owners, and key business stakeholders. This role partners with control owners and cyber program leaders to define meaningful metrics, establish reliable data sources, automate reporting workflows, and translate technical cyber performance data into decision-ready dashboards that support Sentara’s mission, strategic priorities, and enterprise resilience objectives.

City/State

Virginia Beach, VA

Work Shift

First (Days)

Overview

The Cyber Security Metrics Program Manager is responsible for building, maturing, and sustaining an enterprise Cyber Security Metrics Program that provides meaningful, actionable, and visually compelling insights for executive leadership, cyber leadership, control owners, and key business stakeholders. This role partners with control owners and cyber program leaders to define meaningful metrics, establish reliable data sources, automate reporting workflows, and translate technical cyber performance data into decision-ready dashboards that support Sentara’s mission, strategic priorities, and enterprise resilience objectives.

This role requires strong program management discipline, healthcare cyber security awareness, technical reporting expertise, and the ability to convert complex operational data into clear narratives for executives and leaders. The ideal candidate will have hands‑on expertise with Power BI, Power Automate, Microsoft 365, and foundational reporting technologies, along with the curiosity and judgment to stay current with emerging technologies, healthcare cyber trends, and evolving regulatory expectations.

Key Responsibilities

Cyber Metrics Strategy & Program Management

• Define, manage, and mature the Cyber Security Metrics Program in alignment with enterprise cyber strategy, risk priorities, healthcare operations, and Sentara’s mission.
• Develop a clear metrics roadmap that supports executive reporting, leadership decision‑making, cyber program visibility, and continuous improvement.
• Coordinate across cyber pillars, IT teams, business stakeholders, and control owners to ensure metrics are accurate, meaningful, timely, and aligned to strategic objectives.
• Manage program scope, timelines, dependencies, priorities, risks, issues, and deliverables to ensure successful execution and long‑term sustainability.

Control Owner Engagement & Metric Definition

• Work directly with control owners to establish meaningful metrics that measure cyber control effectiveness, operational performance, risk reduction, resiliency, and compliance outcomes.
• Facilitate working sessions to define metric intent, ownership, thresholds, targets, stretch goals, data sources, refresh cadence, and escalation triggers.
• Translate cyber control objectives into measurable key performance indicators, key risk indicators, and operational health measures.
• Establish and maintain metric documentation, business rules, data definitions, and change control processes to promote consistency and trust in reporting.

Dashboard Design, Visualization & Executive Reporting

• Create a best‑of‑breed visual studio for cyber metrics reporting that enables consistent, professional, mission‑aligned dashboards and visual storytelling.
• Design and deliver executive and leadership‑level dashboards that communicate cyber posture, trends, progress, risks, and operational impact in a clear and concise manner.
• Develop dashboard views for multiple audiences, including executive leadership, cyber leadership, control owners, program teams, and business stakeholders.
• Use visual design principles to make complex cyber data understandable, actionable, and aligned with leadership decision cycles.

Data Automation, Reporting Operations & Technology Enablement

• Build, maintain, and optimize reporting solutions using Power BI, Power Automate, Microsoft 365, and foundational reporting technologies.
• Automate data ingestion, transformation, refresh processes, and recurring report production where appropriate to reduce manual effort and improve reporting reliability.
• Partner with technical teams to validate data quality, resolve reporting issues, maintain data source documentation, and ensure dashboards remain current and accurate.
• Support development of repeatable backup processes, documentation, and knowledge transfer to reduce key‑person dependency and improve operational continuity.
• Healthcare Cyber Trend Awareness & Continuous Improvement
• Stay current with the latest technologies, healthcare cyber security trends, emerging threats, regulatory expectations, and industry best practices.
• Apply knowledge of healthcare operations, patient safety considerations, cyber resilience, and threat trends to improve the relevance and usefulness of cyber metrics.
• Continuously evaluate dashboards, reporting processes, and stakeholder feedback to identify opportunities for simplification, automation, and enhanced decision support.
• Promote a culture of data‑driven cyber security, operational rigor, accountability, and continuous improvement.
• Enterprise Resilience & Mission Support
• Embrace the concept of enterprise resilience and support related cyber resilience, business continuity, disaster recovery, tabletop exercise, and operational readiness efforts.
• Connect metrics to resilience outcomes, including protection, detection, response, recovery, continuity of care, and operational impact.
• Support cross‑functional efforts that help Sentara withstand, respond to, and recover from disruptive cyber events while protecting patients, members, caregivers, and business operations.
• Ensure dashboards and reporting products reinforce Sentara’s mission by helping leaders understand risk, prioritize investments, and improve cyber readiness.

Education

• High School / GED (Required)
• Bachelor’s Degree in Information Technology, Cyber Security, Data Analytics, Business, Healthcare Administration, or a related field (Preferred)

Experience

• 6+ years of experience in program management, project management, cyber security, data analytics, business intelligence, reporting, or related technology delivery (Required).
• Demonstrated experience creating dashboards, metrics programs, reporting frameworks, or executive‑level data products.
• Experience working with cyber security, risk management, governance, compliance, audit, resilience, or healthcare technology teams preferred.
• Hands‑on experience with Power BI, Power Automate, Microsoft 365, data source integration, dashboard development, and foundational reporting technologies required.

The ideal candidate will have:

• Strong ability to partner with control owners and stakeholders to define metrics that are useful, measurable, and tied to cyber outcomes.
• Demonstrated ability to translate complex technical information into concise executive narratives, dashboards, and decision‑support materials.
• Healthcare experience or a strong understanding of healthcare cyber security, patient safety, clinical operations, regulatory expectations, and resilience priorities.
• Experience building visually compelling dashboards and reports that support leadership‑level visibility, governance, accountability, and prioritization.
• Technical knowledge and experience with complex workflows, source system dependencies, data quality validation, automation, and reporting operations.
• Curiosity, adaptability, and a continuous improvement mindset with the ability to stay current on emerging technologies, cyber trends, and business intelligence capabilities.
• Strong facilitation, communication, organization, and stakeholder management skills.

Benefits: Caring For Your Family and Your Career

• Medical, Dental, Vision plans
• Adoption, Fertility and Surrogacy Reimbursement up to $10,000
• Paid Time Off and Sick Leave
• Paid Parental & Family Caregiver Leave
• Emergency Backup Care
• Long-Term, Short-Term Disability, and Critical Illness plans
• Life Insurance
• 401k/403B with Employer Match
• Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
• Student Debt Pay Down – $10,000
• Pet Insurance
• Legal Resources Plan
• Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.

Sentara Independence provides quality outpatient services to the surrounding community. The facility includes an ambulance‑accessible emergency room that is supported by board‑certified physicians. Sentara Independence houses state‑of‑the‑art medical equipment and highly‑skilled physicians and staff. Sentara Independence is now an extension of the quality services at Sentara Virginia Beach General Hospital including advanced imaging and physical therapy.

Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000‑member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves.

In support of our mission “to improve health every day,” this is a tobacco‑free environment.

For positions that are available as remote work,

Sentara Health employs associates in the following states:

Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.