IT&Data Performance & Governance Manager (Cybersecurity Metrics)

Our requirements

• Education:
• Bachelor's degree in Information Security, Computer Science, Data Analytics, Business Management, or related field.
• Experience:
• 8+ years of experience in Cybersecurity, Data Analytics, Performance Management, Governance, or Risk Management.
• 3+ years in Product Owner, Performance Lead, Governance Lead, or similar leadership roles.
• Experience working within a CISO organization.
• Proven track record building enterprise-wide KPI and reporting frameworks.
• Technical Knowledge - Strong understanding of:
• Cybersecurity operations and risk management
• NIST CSF, ISO 27001, CIS Controls
• Security Operations Center (SOC)
• Vulnerability Management
• Identity & Access Management
• Cloud Security
• Governance, Risk & Compliance (GRC)
• Security Performance Metrics and KRIs
• Data visualization and analytics platforms
• Preferred Tools:
• Power BI
• ServiceNow
• Jira
• Key Competencies:
• Leadership
• Strategic thinking
• Change leadership
• Product Management:
• Product ownership
• Roadmap management
• Stakeholder prioritization
• Agile methodologies
• Analytics:
• Data storytelling
• KPI/KRI design
• Predictive analytics
• Performance management
• Communication:
• Executive presence
• Board-level reporting
• Stakeholder engagement
• Cross-functional collaboration

Your responsibilities

• Performance & Metrics Strategy
• Define and own the Cybersecurity Performance Measurement Strategy aligned with CISO objectives and enterprise priorities.
• Establish a comprehensive framework of KPIs, KRIs, OKRs, and maturity indicators across cybersecurity domains.
• Develop a multi-year roadmap for cybersecurity metrics, dashboards, and reporting capabilities.
• Ensure performance metrics support regulatory, audit, risk management, and executive reporting requirements.
• Metrics Product Ownership
• Act as Product Owner for the cybersecurity metrics platform and reporting ecosystem.
• Manage the backlog for reporting, dashboard, and analytics enhancements.
• Prioritize requirements based on business value, risk visibility, and stakeholder needs.
• Define data models, metric definitions, governance standards, and quality controls.
• Executive Reporting & Insight Generation
• Deliver executive-level dashboards and performance reviews for the CISO, CIO, Risk Committees, and senior leadership.
• Translate technical cybersecurity data into clear business insights and recommendations.
• Lead monthly and quarterly cybersecurity performance reviews.
• Provide trend analysis, forecasting, benchmarking, and data-driven improvement recommendations.
• Data Governance & Analytics
• Establish metric governance processes, ensuring consistency and integrity across reporting.
• Collaborate with Security Operations, GRC, Risk Management, Identity, Architecture, Vulnerability Management, and Engineering teams to define data requirements.
• Drive automation of data collection, reporting, and performance tracking.
• Ensure compliance with enterprise data governance standards.
• Performance Management Leadership
• Build and lead the Cybersecurity Performance & Metrics capability.
• Develop standard methodologies, templates, and reporting practices across the security organization, challenge value, ask for explanation,monitor action plan
• Foster a culture of accountability, transparency, and continuous improvement through measurement.
• Act as the primary advisor to the CISO on cybersecurity performance and organizational effectiveness.
• Stakeholder Management
• Partner with Business, Technology, Risk, Audit, and Compliance stakeholders.
• Facilitate alignment between security objectives and business outcomes.
• Communicate complex analytical findings to both technical and non-technical audiences.
• Key Deliverables
• Cybersecurity Performance Management Framework
• Enterprise Security KPI and KRI Catalogue
• Executive CISO Dashboard
• Security Scorecards and Performance Reports
• Data Quality and Metrics Governance Model
• Automated Reporting and Analytics Capability
• Quarterly Security Performance Reviews
• Security Maturity and Value Measurement Framework

WHAT NEXT?

What we offer

• A revolutionary job that will be part of the digital transformation of global FMCG leader. We consider that it starts with people who notice more and make better decisions. And that’s exactly the kind of people we want to attract to DANONE.
• We know that the future of business is IT and data. We are looking for catalysts for change. We ensure you work with great products, and technologies in an international environment, learning from experts and experienced managers but how much you will develop in this position depends on you!
• We value smart working so that’s why while being focused on results, we offer flexible working hours and a home office policy. You are able to work from the office in Warsaw twice a week. Want to move to Warsaw? OK! We have a relocation package to help you out!
• On top of that, you will have access to the benefits we offer to you and your family, including private medical care, benefits package for parents, life insurance, social fund, or employee discounts.
• We’ve always been changers.

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of professional training & courses
• life insurance
• parking space for employees
• extra social benefits
• sharing the costs of tickets to the movies, theater
• employee referral program

Recruitment stages

• 1.
  Application
• 2.
  1st video interview with Recruiter
• 3.
  2nd video interview with Hiring Manager
• 4.
  Offer

Grupa Spółek Danone Polska