26th June 2026
Director of Cybersecurity
Cyber Security
London
Up to £170k + bonus
Director of Cybersecurity: Reporting & Metrics
London – 2 days a week on site
£165,000 + bonus
About the Role
We are seeking an experienced and strategic Director of Cybersecurity Security Reporting & Metrics to lead a newly established Security Reporting and Metrics team within our IT Security Governance and Management function. This is a high-impact leadership role responsible for developing and delivering executive-level cybersecurity reporting, performance metrics, and risk insights that enable informed decision-making across senior leadership and Board-level stakeholders.
The successful candidate will build and lead a high-performing team, establish robust reporting capabilities, and drive a data-driven approach to security management. This role requires a strong blend of cybersecurity knowledge, leadership experience, business acumen, data analytics expertise, and stakeholder management skills.
Key ResponsibilitiesLeadership & Team Development
- Establish and lead the Security Reporting and Metrics team, defining its operating model, governance framework, processes, roles, and responsibilities.
- Build a high-performing, collaborative team culture focused on excellence, innovation, and continuous improvement.
- Ensure team objectives align with the wider IT Security strategy and organisational goals.
- Provide leadership, coaching, and professional development to team members.
Executive Security Reporting
- Develop and deliver strategic cybersecurity reporting and metrics for executive leadership and Board audiences.
- Produce detailed and consolidated reports on the organisation’s security posture, security capabilities, and risk landscape in collaboration with key stakeholders, including the Chief Information Officer team
- Translate complex technical security information into clear, concise, and actionable business insights.
- Ensure reporting supports effective decision-making and drives accountability across the organisation.
Security Risk & Performance Measurement
- Lead the measurement, monitoring, and reporting of security risks and performance metrics.
- Establish frameworks for tracking and communicating security risk remediation progress, emerging risks, and potential barriers to delivery.
- Design, implement, and oversee Key Performance Indicators (KPIs) for all IT Security-owned services and processes.
- Define performance benchmarks and reporting standards to drive continuous measurement and improvement.
- Deliver regular reporting and insights to IT Security leadership teams and governance forums.
Reporting Transformation & Continuous Improvement
- Drive the evolution of security reporting methodologies, analytics capabilities, and data visualisation approaches.
- Introduce innovative reporting solutions that improve the clarity, accuracy, and impact of cybersecurity communications.
- Leverage modern Business Intelligence and data analytics tools to enhance reporting effectiveness and decision support.
- Establish scalable reporting and metrics capabilities that support long-term organisational growth and maturity.
Stakeholder Engagement & Governance
- Foster strong partnerships across IT Security, Technology, Risk, Compliance, Audit, and executive stakeholder groups.
- Ensure consistency, accuracy, and relevance of reporting through effective collaboration and governance.
- Represent the Security Reporting and Metrics function in governance committees, leadership forums, and stakeholder meetings.
- Provide expert advice and insight on security reporting, metrics, and performance trends.
About You
We are looking for a strategic security leader who can:
- Inspire and lead a Security Reporting and Metrics team, creating clarity of purpose and accountability.
- Develop and execute transformational reporting and analytics programmes that strengthen cybersecurity governance and oversight.
- Identify priorities and opportunities to build a world-class reporting function tailored to organisational needs.
- Deliver meaningful insights that support executive decision-making and enhance security risk management.
- Influence senior stakeholders and communicate complex technical information effectively to both technical and non-technical audiences.
- Drive a culture of continuous improvement, innovation, and data-led decision-making.
Skills & Experience
Essential Experience
- 12-15 years’ experience in cybersecurity reporting, security governance, risk management, data analytics, or a related discipline.
- Approximately 8-10 years’ leadership experience managing teams focused on security reporting, metrics, analytics, or risk oversight.
- Proven experience operating within highly regulated environments.
- Demonstrated success designing and implementing enterprise-scale security reporting and metrics frameworks.
- Experience developing executive and Board-level reporting materials.
- Strong understanding of cybersecurity risk measurement, performance management, and governance processes.
- Experience leading transformation initiatives involving reporting, analytics, or Business Intelligence capabilities.
- Proven ability to communicate complex technical concepts to senior business stakeholders.
Technical Expertise
- Strong knowledge of security metrics, KPIs, KRIs, risk reporting, and performance measurement frameworks.
- Experience leveraging business intelligence, reporting, and data visualisation tools to generate actionable insights.
- Strong analytical, problem-solving, and data interpretation skills.
- Understanding of security governance, risk management, and compliance principles.
Professional QualificationsEssential
- Strong understanding of relevant cybersecurity regulations, compliance obligations, and industry standards.
- Demonstrated ability to interpret and apply regulatory requirements within security reporting and governance frameworks.
Desirable
- Industry certifications such as:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CRISC (Certified in Risk and Information Systems Control)
- CGEIT (Certified in the Governance of Enterprise IT)
- Relevant data analytics, business intelligence, or project management certifications
Why Join Us?
This is a unique opportunity to shape and lead a newly established Security Reporting & Metrics function that will play a critical role in strengthening cybersecurity governance, transparency, and decision-making across the organisation. You will work closely with executive leaders, influence strategic outcomes, and establish capabilities that directly enhance the organisation’s security maturity and resilience.
If you are a strategic security leader with a passion for data, analytics, and meaningful business insight, we would love to hear from you.
Consultant - Abigail Moss
Telephone: 0207 392 7516
Email: abigail.moss@spencer-rose.com
Share This Position