Cyber Security Metrics Program Manager

Cyber Security Metrics Program Manager

Virginia Beach, VA

First (Days)

The Cyber Security Metrics Program Manager is responsible for building, maturing, and sustaining an enterprise Cyber Security Metrics Program that provides meaningful, actionable, and visually compelling insights for executive leadership, cyber leadership, control owners, and key business stakeholders. This role partners with control owners and cyber program leaders to define meaningful metrics, establish reliable data sources, automate reporting workflows, and translate technical cyber performance data into decision-ready dashboards that support Sentara's mission, strategic priorities, and enterprise resilience objectives.

This role requires strong program management discipline, healthcare cyber security awareness, technical reporting expertise, and the ability to convert complex operational data into clear narratives for executives and leaders. The ideal candidate will have hands-on expertise with Power BI, Power Automate, Microsoft 365, and foundational reporting technologies, along with the curiosity and judgment to stay current with emerging technologies, healthcare cyber trends, and evolving regulatory expectations.

• Define, manage, and mature the Cyber Security Metrics Program in alignment with enterprise cyber strategy, risk priorities, healthcare operations, and Sentara's mission.
• Develop a clear metrics roadmap that supports executive reporting, leadership decision-making, cyber program visibility, and continuous improvement.
• Coordinate across cyber pillars, IT teams, business stakeholders, and control owners to ensure metrics are accurate, meaningful, timely, and aligned to strategic objectives.
• Manage program scope, timelines, dependencies, priorities, risks, issues, and deliverables to ensure successful execution and long-term sustainability.

• Work directly with control owners to establish meaningful metrics that measure cyber control effectiveness, operational performance, risk reduction, resiliency, and compliance outcomes.
• Facilitate working sessions to define metric intent, ownership, thresholds, targets, stretch goals, data sources, refresh cadence, and escalation triggers.
• Translate cyber control objectives into measurable key performance indicators, key risk indicators, and operational health measures.
• Establish and maintain metric documentation, business rules, data definitions, and change control processes to promote consistency and trust in reporting.

• Create a best-of-breed visual studio for cyber metrics reporting that enables consistent, professional, mission-aligned dashboards and visual storytelling.
• Design and deliver executive and leadership-level dashboards that communicate cyber posture, trends, progress, risks, and operational impact in a clear and concise manner.
• Develop dashboard views for multiple audiences, including executive leadership, cyber leadership, control owners, program teams, and business stakeholders.
• Use visual design principles to make complex cyber data understandable, actionable, and aligned with leadership decision cycles.

• Build, maintain, and optimize reporting solutions using Power BI, Power Automate, Microsoft 365, and foundational reporting technologies.
• Automate data ingestion, transformation, refresh processes, and recurring report production where appropriate to reduce manual effort and improve reporting reliability.
• Partner with technical teams to validate data quality, resolve reporting issues, maintain data source documentation, and ensure dashboards remain current and accurate.
• Support development of repeatable backup processes, documentation, and knowledge transfer to reduce key-person dependency and improve operational continuity.

• Stay current with the latest technologies, healthcare cyber security trends, emerging threats, regulatory expectations, and industry best practices.
• Apply knowledge of healthcare operations, patient safety considerations, cyber resilience, and threat trends to improve the relevance and usefulness of cyber metrics.
• Continuously evaluate dashboards, reporting processes, and stakeholder feedback to identify opportunities for…