3M Health Care is now Solventum

At Solventum, we enable better, smarter, safer healthcare to improve lives. As a new company with a long legacy of creating breakthrough solutions for our customers’ toughest challenges, we pioneer game-changing innovations at the intersection of health, material and data science that change patients' lives for the better while enabling healthcare professionals to perform at their best. Because people, and their wellbeing, are at the heart of every scientific advancement we pursue.

We partner closely with the brightest minds in healthcare to ensure that every solution we create melds the latest technology with compassion and empathy. Because at Solventum, we never stop solving for you.

The Cybersecurity Metrics & Reporting Governance Manager is responsible for advancing the maturity, effectiveness, and business value of Solventum's cybersecurity metrics, reporting, and analytics capabilities. 

This role serves as the strategic lead for cybersecurity measurement, partnering closely with cybersecurity leadership to establish reporting standards, improve data quality, enhance measurement frameworks, and transform cybersecurity data into actionable insights that support risk management and executive decision-making. 

The position combines cybersecurity governance, analytics, reporting strategy, and technical expertise to drive consistent, reliable, and scalable reporting capabilities across the cybersecurity organization. The role is expected to balance strategic leadership with hands-on technical execution, including data analysis, dashboard development, reporting automation, system integrations, and continuous improvement of reporting processes.

The Impact You’ll Make in this Role 

• Developing and advancing the cybersecurity metrics and reporting strategy, including the roadmap, recurring reporting cycle, and continuous improvement of measurement capabilities. 

• Establishing governance for cybersecurity metrics, KPIs, KRIs, scorecards, dashboards, and reporting standards to ensure consistent definitions, ownership, thresholds, and methodologies. 

• Leading the development and delivery of executive-level dashboards, scorecards, and reporting packages that translate technical cybersecurity data into clear business insights and risk-focused narratives. 

• Improving the quality, completeness, consistency, and reliability of cybersecurity reporting data through validation processes, data quality controls, and partnership with system and data owners. 

• Designing and maintaining automated reporting solutions, dashboards, datasets, queries, and data models that reduce manual effort and improve scalability. 

• Partnering across Cybersecurity, GRC, IT, Risk Management, Compliance, Audit, and business stakeholders to align metrics with business objectives, control performance, regulatory expectations, and leadership priorities. 

• Analyzing trends, risks, and control performance to identify emerging issues, improvement opportunities, and areas requiring leadership attention. 

• Supporting internal and external audit activities by providing reliable cybersecurity reporting, measurement evidence, metric definitions, and traceability. 

• Evaluating reporting tools, data sources, integrations, and automation opportunities to improve cybersecurity measurement and analytics capabilities. 

• Serving as a subject matter expert and senior delegate for the Metrics & Reporting function, including mentoring team members on reporting practices, measurement methodologies, and data-driven decision-making. 

Your skills & expertise (Minimum qualifications): 

• Bachelor’s degree in Cybersecurity, Information Technology, Data Analytics, Computer Science, Business, Information Systems, or a related field, or equivalent practical experience. 

• 7+ years of experience in cybersecurity, governance, risk management, analytics, reporting, business intelligence, data management, or related disciplines. 

• Experience developing cybersecurity metrics, dashboards, scorecards, or executive reporting. 

• Experience working with cybersecurity technologies, controls, governance programs, or risk management frameworks. 

• Experience writing and troubleshooting SQL queries or working with relational data structures. 

• Experience integrating, analyzing, or reporting data from multiple technology platforms or enterprise systems. 

• Experience building automated reporting, analytics, dashboards, or business intelligence solutions. 

• Strong analytical, problem-solving, and data interpretation skills. 

• Ability to communicate complex technical, analytical, and cybersecurity concepts clearly to leadership and non-technical audiences. 

• Experience partnering cross-functionally with cybersecurity, IT, audit, compliance, risk, or business stakeholders. 

Additional qualifications (Nice to have): 

• Experience using APIs to automate data collection, reporting, or system integrations. 

• Experience with Python, PowerShell, or other scripting and automation languages. 

• Experience with Power BI, Power Query, DAX, Tableau, or similar business intelligence and visualization tools. 

• Experience developing data models, reporting logic, data pipelines, or automated reporting workflows. 

• Experience with cybersecurity, GRC, or enterprise platforms such as Axonius, Archer, ServiceNow, Splunk, CrowdStrike, Microsoft Defender, Snowflake, AWS, or similar tools. 

• Knowledge of cybersecurity frameworks such as NIST CSF, CIS Controls, ISO 27001, NIST 800-53, or related regulatory/control frameworks. 

• Experience supporting board, executive, risk committee, audit, or regulatory reporting. 

• Experience implementing data governance, data quality, master data management, or authoritative source practices. 

• Experience with cloud data platforms, data lakes, or modern analytics environments. 

• Experience building predictive analytics, advanced analytics, or risk-based measurement capabilities. 

Work location: Bangalore: Hybrid