Security Reporting Analyst- 100% Us Remote

Company Description

Experian is the world’s leading global information services company, unlocking the power of data to create more opportunities for consumers, businesses and society. We are thrilled to share that FORTUNE has named Experian one of the 100 Best Companies to work for. In addition, for the last five years we’ve been named in the 100 “World’s Most Innovative Companies” by Forbes Magazine.

The Metrics and Reporting Senior Analyst is responsible for contributing to the design function of the Experian Metrics and Reporting program. This encompasses designing and maintaining a security metrics and reporting framework that aligns with industry standards with the goal of providing security and privacy insight across Experian.

Working with internal security teams the reporting senior analyst will identify metrics to support security governance requirements and support the design of future reporting and the expansion of our security reporting framework.

This role will act as a design, scoping, and planning point with internal teams to ensure proposed reporting and implementation projects are thoroughly scoped and designed. The reporting senior analyst will conduct reviews against user reporting requests and build design proposals to satisfy security requirements including policy, core strategy, process evaluation and control maturity requirements.

The reporting senior analyst will be required to review available data models and work with our engineering team to define and scope requirements. This design and outline will form the basis for our internal security data engineering teams’ backlog and enable us to operationalize and build out production versions of internal security reporting.

Job Functions

• Provide actionable recommendations to critical stakeholders based on data analysis and findings related to security processes requiring reporting.
• Ensure the timely and accurate scoping of all proposed security program tasks tied to delivering security metrics and executive reports and scorecards.
• Coordinate with internal engineering teams to successfully design and display security metrics and security reports in an easy to use and easy to navigate method.
• Produce scoping documents outlining the requirements for business requests, outlining key requirements, known caveats and critically analyze processes being suggested for use within security metrics and reporting.
• Work with security program leaders to identify risk-based security metrics that align with the security program and security risk management.
• Utilize standardized processes to aid reporting design and ensure business use cases are adequately scoped to enable engineering teams to develop and build reporting solutions.
• Maintain the mapping of security metrics to the security program (risks, governance requirements, policy, standards, and security processes)
• Review business and internal requests for new or enhanced security reporting, identify suitable scoping, and design standards to aid engineering teams with building reports to agreed specifications to satisfy executive and stakeholder requirements.
• Develop data standards, policies, and procedures to structure the metrics and reporting framework as part of a long-term improvement strategy.

Qualifications

• Experienced with collaboration tools such as JIRA, ServiceNow, Confluence etc.
• Analytical and conceptual skills.
• Strong communication and presentation skills.
• Knowledge of industry standards and frameworks like NIST 800, NIST Cybersecurity Framework.
• Experience with presenting data and requirements to senior technical audiences.
• Broad knowledge of cybersecurity technologies.
• 5+ years’ experience in information security.
• 5+ years’ experience performing Information Security reporting, program analysis or executive security reporting.
• Process driven, with an eye for detail, automation, and efficiency to improve programs/processes.  

Responsibilities/Requirements

• Knowledge of process improvements methodologies, agile ways of working.
• Knowledge of risk management processes.
• Understanding of relevant laws, regulations, frameworks, and other governance requirements as they relate to cybersecurity and privacy e.g., NIST.
• Ensure all metrics and reporting framework mandated processes and actions are completed on time and to a good quality.
• Skill in identifying hidden patterns or relationships.
• Ability to understand and interpret security policies and standards.
• Knowledge of the tools and techniques used to analyze data or produce security metrics and reports (SQL, Alteryx, Tableau, Excel etc.).
• Skill in assessing the predictive power of a model.
• Understanding of the security policies and standards.
• Skill in creating and utilizing mathematical or statistical models.
• Ability to critique user requests and distill these into discrete actionable items.

Additional Information

Our uniqueness is that we truly value yours.

Experian's culture, people and environments are key differentiators. We take our people agenda very seriously. We focus on what truly matters; diversity and inclusion, work/life balance, flexible working, development, engagement, collaboration, wellness, reward & recognition, volunteering... the list goes on

We’re an award-winning organization due to our strong people focus

Experian isn't just growing, we're leveraging cutting edge data science, design thinking and passion to build tomorrow's credit solutions. Innovation is a critical part of Experian's DNA and culture

Our compensation reflects the cost of labor across several U.S. geographic markets. The base pay range for this position is listed above. Within this range, individual pay is determined by work location and additional factors such as job-related skills, experience and education. This position is also eligible for a variable pay opportunity and a comprehensive benefits package which includes health, life and disability insurance, generous paid time off including paid parental and family care leave, an employee stock purchase plan and a 401(k) plan with a company match.

Experian is proud to be an Equal Opportunity and Affirmative Action employer. Our goal is to create a thriving, inclusive and diverse team where people love their work and love working together. We believe that diversity, equity and inclusion is essential to our purpose of creating a better tomorrow. We value the uniqueness of every individual and want you to bring your whole, authentic self to work. For us, this is The Power of YOU and and it reflects what we believe. See our DEI work in action!

Experian Careers - Creating a better tomorrow together

Find out what its like to work for Experian by clicking here