The Information Security Metrics Automation Contractor will design, complete, and automate cybersecurity key risk indicators (KRIs) and executive reporting for the GRC function. This role will translate approved metric definitions into reliable data pipelines, semantic models, Power BI dashboards, and scheduled reporting processes that provide timely visibility into cybersecurity risk performance and alignment with risk appetite. The contractor will work across multiple cybersecurity domains, including Vulnerability Management, Identity and Access Management, Data Protection, and Backup and Recovery. The role requires hands-on technical delivery, strong data-quality discipline, and the ability to document and transition sustainable solutions to internal teams.
Key Responsibilities:
Complete development and implementation of prioritized cybersecurity KRIs using approved definitions, calculations, targets, owners, and source data. Partner with GRC, cybersecurity teams, and data owners to validate source fields, calculation logic, data quality, dependencies, and acceptance criteria. Design and implement repeatable data ingestion, transformation, reconciliation, and scheduled refresh processes. Build and maintain Power BI semantic models, DAX measures, dashboards, executive views, and service-level reporting. Determine and document appropriate semantic model storage modes, including DirectQuery and Import, based on source-system and connection constraints. Standardize authentication and connection patterns for metric data sources where feasible. Deploy and validate solutions across Development, Quality Assurance, and Production Power BI environments. Configure the Power BI Production App, audience-specific views, dashboard navigation, and embedded buttons to support a clear user experience. Create consolidated reporting that maps KRI results to risk appetite statements and presents rolling quarterly trends. Identify and resolve data-quality, integration, permission, licensing, capacity, and refresh issues that affect report reliability. Document data lineage, calculations, technical configurations, support procedures, known limitations, and unresolved dependencies. Provide knowledge transfer and transition ownership of completed solutions to internal teams.
Qualification & Experience:
Demonstrated experience developing production Power BI solutions, including data models, semantic models, DAX measures, dashboards, and executive reporting. Hands-on experience with Power BI storage modes, data-source authentication, scheduled refresh, workspace deployment, and app configuration. Experience building automated data ingestion and transformation processes using Power Automate or comparable workflow and data-integration tools. Strong experience with data validation, reconciliation, metric calculation, exception handling, and troubleshooting across multiple source systems. Strong experience with Power BI deployment pipelines and Power BI services applications. Ability to translate business and risk-reporting requirements into scalable technical solutions. Experience deploying and testing reporting solutions across Development, Quality Assurance, and Production environments. Ability to create clear technical documentation, data lineage, operating procedures, and knowledge-transfer materials. Strong communication, organization, and stakeholder-management skills with the ability to work independently against defined priorities and acceptance criteria.
Preferred Qualifications:
Experience supporting cybersecurity, risk, compliance, audit, or enterprise risk reporting. Familiarity with cybersecurity metrics in Vulnerability Management, Identity and Access Management, Data Protection, or Backup and Recovery. Experience developing KRI or KPI reporting mapped to enterprise risk appetite or executive-level performance reporting. Experience improving report usability through navigation, audience segmentation, and role-appropriate views.
Key Deliverables:
Production-ready priority KRIs with approved definitions, owners, source data, calculations, and targets. Automated or materially streamlined data ingestion, transformation, and refresh processes where source systems permit. Validated Power BI semantic models, dashboards, executive reporting, and audience-specific application views. A consolidated service-level KRI view showing risk appetite alignment and rolling quarterly trends. Documented data-quality exceptions, technical limitations, and remediation plans for metrics that cannot be automated. Complete data lineage, support procedures, configuration documentation, and knowledge transfer for internal ownership.
