Security Reporting & Automation Analyst

We are seeking a Security Reporting & Automation Analyst to join the Security Governance function.

This role is data‑driven and technology‑oriented, focused on designing, automating, and maintaining security governance reports, dashboards, and control monitoring workflows.

The ideal candidate has strong skills in data modeling, reporting, automation, and scripting, and is comfortable working with tools such as Power BI, Power Automate, Python, and APIs.

You will work closely with security governance, IT, and control owners to transform raw security data into reliable, automated, and decision‑ready reporting for management and executive stakeholders.

This role does not require deep hands‑on security expertise. Instead, it requires the ability to structure, automate, and operationalize security data and indicators defined by governance and security teams.

Required experience & competencies

Core Experience

• 3–6 years of experience in one or more of the following areas: 
  • Reporting & dashboards
  • Data analytics
  • Automation / orchestration
  • IT or security data analysis
• Proven experience with Power BI (data modeling, DAX, dashboards).
• Strong experience with Power Automate and workflow automation.
• Practical experience with Python or equivalent scripting languages.
• Experience working with structured and semi‑structured data, APIs, and multiple data sources.

Security Knowledge (Basic / Functional)

• Basic understanding of information security concepts, such as: 
  • Security controls
  • Vulnerability management
  • Risk and compliance indicators
• Ability to understand and apply security requirements defined by others, without being a security expert.
• No deep technical security implementation skills required.

Technical & Data Skills

• Strong analytical and problem‑solving mindset.
• Ability to structure unclear requirements into clear data models and metrics.
• Attention to data quality, consistency, and documentation.
• Comfortable working in complex, multi‑stakeholder environments.

Soft Skills

• Strong communication skills, especially with non‑technical stakeholders.
• Ability to work independently and proactively.
• Structured, methodical, and improvement‑oriented mindset.
• Team player with a service‑oriented approach.

Required Education

•    Bachelor’s or Master’s degree in: 
o    Computer Science
o    Information Systems
o    Data Analytics
o    Engineering
o    Or a related field

The Security Reporting & Automation Analyst is responsible for industrializing security governance reporting and control monitoring, ensuring consistency, automation, and data quality across the organization.

Security Reporting & Dashboards

• Design, build, and maintain Power BI dashboards for security governance, risk, compliance, and control reporting.
• Translate security and governance requirements into clear, structured KPIs, metrics, and indicators.
• Ensure reporting is accurate, repeatable, auditable, and management‑ready (CISO, IT management, committees).

Data Collection & Automation

• Automate data collection from multiple sources (security tools, CMDB, vulnerability platforms, ticketing systems, spreadsheets, APIs).
• Develop Power Automate flows, scripts, and orchestration mechanisms to reduce manual reporting and controls.
• Maintain data pipelines and ensure data integrity and traceability.

Scripting & Advanced Automation

• Use Python and/or other scripting languages to: 
  • Process and normalize data
  • Perform consistency checks and aggregations
  • Generate intermediate datasets or automated reports
• Interact with APIs and structured data sources to support reporting and governance use cases.

Governance & Control Support

• Support the Security Governance team by operationalizing control frameworks into measurable indicators.
• Maintain automated or semi‑automated control monitoring mechanisms (e.g. evidence collection, status tracking).
• Contribute to inspection manuals and documentation from a tooling and automation perspective.

Stakeholder Interaction

• Work closely with security governance, IT teams, and control owners to understand reporting needs.
• Support preparation of governance committees, audits, and management reviews through reliable reporting.
• Act as a technical enabler, not a policy owner.