Lead Security Metrics Analyst

Mastercard; O’Fallon (MO); On-site; USD 110,000 - 160,000; Full time

Job summary

Mastercard is seeking a Lead Security Metrics Analyst to own the development, collection, analysis, and reporting of cybersecurity metrics. You will drive KRIs, KPIs, and risk scorecards, coordinating with security controls owners and stakeholders.

The role requires building and maintaining Power BI dashboards, Dataverse solutions, and automated reporting processes to support risk-informed decision making. A strong background in security analytics and regulatory reporting is essential.

Qualifications

• Experience building enterprise metrics, KRIs, KPIs, and executive scorecards.
• Proficient in Power BI data modeling, DAX, dashboards for senior leadership.
• Knowledge of information security, risk management, governance, and regulatory reporting.
• Experience integrating data from multiple enterprise platforms.

Responsibilities

• Lead development and governance of security metrics, KRIs, and KPIs across Corporate Security.
• Develop and maintain Power BI dashboards, scorecards, and executive reports.
• Build and support Dataverse solutions with Power Apps and Power Automate for metric collection and governance.
• Collaborate with security, risk, compliance, and operations to translate requirements into scalable data solutions.
• Develop methodologies and repositories for consistent reporting and governance.

Skills

Power BI

Data modeling

DAX development

Dashboard design

Executive visualization

Education

Certifications in information security/risk analytics

Tools

Power Apps

Dataverse

Power Automate

Job description

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Lead Security Metrics Analyst

Who is Mastercard?

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships, and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.

Mission First, People Always

Corporate Security is responsible for keeping Mastercard safe and secure from cyber and physical threats. We are a highly effective team protecting a major component of global payments infrastructure. Our new Security Risk and Control Operations team is at the forefront of this effort in the "1st Line of Defense", coordinating efforts across Corporate Security, enterprise risk management, and market-facing product teams to assess risks, implement controls to mitigate them, and provide assurance to regulators and stakeholders of Mastercard's best-in-class performance in information security.

We are seeking a Lead Security Metrics Analyst to drive the development, collection, analysis, and reporting of metrics related to cybersecurity, to enable risk management and meet regulatory requirements. Working directly with owners of security controls, you will coordinate the flow of metric data and maintain collection and visualization tools to inform actions by the security team.

In this role you will:

• Lead the development, implementation, and governance of security metrics, Key Risk Indicators (KRIs), and Key Performance Indicators (KPIs) across Corporate Security domains.
• Develop and maintain Power BI dashboards, scorecards, and executive reporting products that provide actionable insights into security risk, control effectiveness, issue management, and operational performance.
• Build and support Dataverse solutions, including Power Apps and Power Automate, that streamline metric collection, governance processes, and reporting.
• Partner with security, risk, compliance, and operational teams to identify new reporting requirements and translate business needs into scalable data solutions and automated processes.
• Develop and maintain metric methodologies, centralized metric repositories, and supporting governance documentation to ensure consistency, transparency, and traceability of reporting.
• Analyze security, risk, and operational data to identify trends, emerging risks, control effectiveness insights, and opportunities for process improvement.
• Drive automation initiatives that improve data quality, reduce manual effort, and enhance reporting efficiency across security and risk management functions.
• Support regulatory remediation, audit activities, and risk governance forums through development of reporting solutions, evidence gathering, and performance measurement capabilities.
• Present metric methodologies, reporting outputs, and risk insights to governance forums and executive stakeholders to support risk-informed decision making.
• Provide technical leadership and subject matter expertise on data visualization, business intelligence, reporting architecture, Power Platform solutions, and metric governance practices.

The ideal candidate for this position should be:

• Experienced with developing enterprise metrics, KRIs, KPIs, risk scorecards, and executive reporting solutions.
• Experienced with Power BI, including data modeling, DAX development, dashboard design, and executive-level visualization development.
• Experienced designing and administering Power Apps, Dataverse solutions, and Power Automate workflows.
• Knowledgeable in information security, technology risk management, governance, compliance, and regulatory reporting.
• Experienced working with large datasets and integrating information from multiple enterprise platforms and data sources.
• Strong written and verbal communication skills with the ability to communicate effectively with both technical teams and executive leadership.
• Professionally certified in information security, risk management, analytics, or related disciplines (e.g., CISSP, CISA, Security+, CRISC, or equivalent).

Mastercard Corporate Security Roles have been aligned with the NICE framework (National Ini