Define and own the Cybersecurity Performance Measurement Strategy aligned with CISO objectives and enterprise priorities.
Establish a comprehensive framework of KPIs, KRIs, OKRs, and maturity indicators across cybersecurity domains.
Develop a multi-year roadmap for cybersecurity metrics, dashboards, and reporting capabilities.
Ensure performance metrics support regulatory, audit, risk management, and executive reporting requirements.
Metrics Product Ownership
Act as Product Owner for the cybersecurity metrics platform and reporting ecosystem.
Manage the backlog for reporting, dashboard, and analytics enhancements.
Prioritize requirements based on business value, risk visibility, and stakeholder needs.
Define data models, metric definitions, governance standards, and quality controls.
Executive Reporting & Insight Generation
Deliver executive-level dashboards and performance reviews for the CISO, CIO, Risk Committees, and senior leadership.
Translate technical cybersecurity data into clear business insights and recommendations.
Lead monthly and quarterly cybersecurity performance reviews.
Provide trend analysis, forecasting, benchmarking, and data-driven improvement recommendations.
Data Governance & Analytics
Establish metric governance processes, ensuring consistency and integrity across reporting.
Collaborate with Security Operations, GRC, Risk Management, Identity, Architecture, Vulnerability Management, and Engineering teams to define data requirements.
Drive automation of data collection, reporting, and performance tracking.
Ensure compliance with enterprise data governance standards.
Performance Management Leadership
Build and lead the Cybersecurity Performance & Metrics capability.
Develop standard methodologies, templates, and reporting practices across the security organization, challenge value, ask for explanation,monitor action plan
Foster a culture of accountability, transparency, and continuous improvement through measurement.
Act as the primary advisor to the CISO on cybersecurity performance and organizational effectiveness.
Stakeholder Management
Partner with Business, Technology, Risk, Audit, and Compliance stakeholders.
Facilitate alignment between security objectives and business outcomes.
Communicate complex analytical findings to both technical and non-technical audiences.
Key Deliverables
Cybersecurity Performance Management Framework
Enterprise Security KPI and KRI Catalogue
Executive CISO Dashboard
Security Scorecards and Performance Reports
Data Quality and Metrics Governance Model
Automated Reporting and Analytics Capability
Quarterly Security Performance Reviews
Security Maturity and Value Measurement Framework
Our requirements
Education:
Bachelor's degree in Information Security, Computer Science, Data Analytics, Business Management, or related field.
Experience:
8+ years of experience in Cybersecurity, Data Analytics, Performance Management, Governance, or Risk Management.
3+ years in Product Owner, Performance Lead, Governance Lead, or similar leadership roles.
Experience working within a CISO organization.
Proven track record building enterprise-wide KPI and reporting frameworks.
Technical Knowledge - Strong understanding of:
Cybersecurity operations and risk management
NIST CSF, ISO 27001, CIS Controls
Security Operations Center (SOC)
Vulnerability Management
Identity & Access Management
Cloud Security
Governance, Risk & Compliance (GRC)
Security Performance Metrics and KRIs
Data visualization and analytics platforms
Preferred Tools:
Power BI
ServiceNow
Jira
Key Competencies:
Leadership
Strategic thinking
Change leadership
Product Management:
Product ownership
Roadmap management
Stakeholder prioritization
Agile methodologies
Analytics:
Data storytelling
KPI/KRI design
Predictive analytics
Performance management
Communication:
Executive presence
Board-level reporting
Stakeholder engagement
Cross-functional collaboration
What we offer
A revolutionary job that will be part of the digital transformation of global FMCG leader. We consider that it starts with people who notice more and make better decisions. And that’s exactly the kind of people we want to attract to DANONE.
We know that the future of business is IT and data. We are looking for catalysts for change. We ensure you work with great products, and technologies in an international environment, learning from experts and experienced managers but how much you will develop in this position depends on you!
We value smart working so that’s why while being focused on results, we offer flexible working hours and a home office policy. You are able to work from the office in Warsaw twice a week. Want to move to Warsaw? OK! We have a relocation package to help you out!
On top of that, you will have access to the benefits we offer to you and your family, including private medical care, benefits package for parents, life insurance, social fund, or employee discounts.