← Cybersecurity / Information Security — P6

Goal templates — Cybersecurity / Information Security — P6

Security · Cybersecurity / Information Security · P6 — Principal Professional

These are canon-derived frames, not advice: every line is either verbatim JobFrame canon text or a fixed template wrapping it. ⟨target⟩ / ⟨baseline⟩ / ⟨date⟩ are placeholders for the manager to fill in. Nothing here is generated by AI — rows are omitted, never invented, when the canon lacks the underlying field.

SMART goals

One row per canon core output / responsibility this level owns.

JFM responsibility (P6)

Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence

Specific: Deliver: "Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence"
Measurable: Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
Achievable: Scoped to this level's jfm complexity/problem-solving rubric: "Solves critical, broad-design problems with wide latitude, defining systems, methodologies, and secure architectures for current and future standards."
Relevant: Advances the Security · Cybersecurity / Information Security mandate for a P6 — Principal Professional.
Time-bound: ⟨date⟩

JFM responsibility (P6)

Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC

Specific: Deliver: "Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC"
Measurable: Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
Achievable: Scoped to this level's jfm complexity/problem-solving rubric: "Solves critical, broad-design problems with wide latitude, defining systems, methodologies, and secure architectures for current and future standards."
Relevant: Advances the Security · Cybersecurity / Information Security mandate for a P6 — Principal Professional.
Time-bound: ⟨date⟩

JFM responsibility (P6)

Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide

Specific: Deliver: "Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide"
Measurable: Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
Achievable: Scoped to this level's jfm complexity/problem-solving rubric: "Solves critical, broad-design problems with wide latitude, defining systems, methodologies, and secure architectures for current and future standards."
Relevant: Advances the Security · Cybersecurity / Information Security mandate for a P6 — Principal Professional.
Time-bound: ⟨date⟩

JFM responsibility (P6)

Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards

Specific: Deliver: "Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards"
Measurable: Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
Achievable: Scoped to this level's jfm complexity/problem-solving rubric: "Solves critical, broad-design problems with wide latitude, defining systems, methodologies, and secure architectures for current and future standards."
Relevant: Advances the Security · Cybersecurity / Information Security mandate for a P6 — Principal Professional.
Time-bound: ⟨date⟩

JFM responsibility (P6)

Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers

Specific: Deliver: "Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers"
Measurable: Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
Achievable: Scoped to this level's jfm complexity/problem-solving rubric: "Solves critical, broad-design problems with wide latitude, defining systems, methodologies, and secure architectures for current and future standards."
Relevant: Advances the Security · Cybersecurity / Information Security mandate for a P6 — Principal Professional.
Time-bound: ⟨date⟩

Copy / print as textshow ▾

1. Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence  [source: JFM responsibility (P6)]
   Specific:    Deliver: "Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence"
   Measurable:  Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
   Achievable:  Scoped to this level's jfm complexity/problem-solving rubric: "Solves critical, broad-design problems with wide latitude, defining systems, methodologies, and secure architectures for current and future standards."
   Relevant:    Advances the Security · Cybersecurity / Information Security mandate for a P6 — Principal Professional.
   Time-bound:  ⟨date⟩

2. Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC  [source: JFM responsibility (P6)]
   Specific:    Deliver: "Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC"
   Measurable:  Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
   Achievable:  Scoped to this level's jfm complexity/problem-solving rubric: "Solves critical, broad-design problems with wide latitude, defining systems, methodologies, and secure architectures for current and future standards."
   Relevant:    Advances the Security · Cybersecurity / Information Security mandate for a P6 — Principal Professional.
   Time-bound:  ⟨date⟩

3. Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide  [source: JFM responsibility (P6)]
   Specific:    Deliver: "Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide"
   Measurable:  Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
   Achievable:  Scoped to this level's jfm complexity/problem-solving rubric: "Solves critical, broad-design problems with wide latitude, defining systems, methodologies, and secure architectures for current and future standards."
   Relevant:    Advances the Security · Cybersecurity / Information Security mandate for a P6 — Principal Professional.
   Time-bound:  ⟨date⟩

4. Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards  [source: JFM responsibility (P6)]
   Specific:    Deliver: "Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards"
   Measurable:  Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
   Achievable:  Scoped to this level's jfm complexity/problem-solving rubric: "Solves critical, broad-design problems with wide latitude, defining systems, methodologies, and secure architectures for current and future standards."
   Relevant:    Advances the Security · Cybersecurity / Information Security mandate for a P6 — Principal Professional.
   Time-bound:  ⟨date⟩

5. Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers  [source: JFM responsibility (P6)]
   Specific:    Deliver: "Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers"
   Measurable:  Move the metric this drives from ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩.
   Achievable:  Scoped to this level's jfm complexity/problem-solving rubric: "Solves critical, broad-design problems with wide latitude, defining systems, methodologies, and secure architectures for current and future standards."
   Relevant:    Advances the Security · Cybersecurity / Information Security mandate for a P6 — Principal Professional.
   Time-bound:  ⟨date⟩

OKRs

Objectives from this level's core outputs; key results only where a real dimension or capability backs them.

JFM responsibility (P6)

Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence

From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence"
Evidence at this level's scope bar: "Organization-wide architecture and the hardest problems" — ⟨target⟩ by ⟨date⟩

JFM responsibility (P6)

Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC

From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC"
Evidence at this level's autonomy bar: "Defines direction; minimal oversight" — ⟨target⟩ by ⟨date⟩

JFM responsibility (P6)

Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide

From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide"
Evidence at this level's complexity bar: "Strategic, open-ended problems shaping the technical future" — ⟨target⟩ by ⟨date⟩

JFM responsibility (P6)

Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards

From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards"
Evidence at this level's impact bar: "Organization-wide" — ⟨target⟩ by ⟨date⟩

JFM responsibility (P6)

Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers

From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers"
Evidence at this level's decision rights bar: "Sets technical strategy for a major area" — ⟨target⟩ by ⟨date⟩

Copy / print as textshow ▾

Objective 1: Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence  [source: JFM responsibility (P6)]
  KR1. From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence"
  KR2. Evidence at this level's scope bar: "Organization-wide architecture and the hardest problems" — ⟨target⟩ by ⟨date⟩

Objective 2: Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC  [source: JFM responsibility (P6)]
  KR1. From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC"
  KR2. Evidence at this level's autonomy bar: "Defines direction; minimal oversight" — ⟨target⟩ by ⟨date⟩

Objective 3: Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide  [source: JFM responsibility (P6)]
  KR1. From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide"
  KR2. Evidence at this level's complexity bar: "Strategic, open-ended problems shaping the technical future" — ⟨target⟩ by ⟨date⟩

Objective 4: Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards  [source: JFM responsibility (P6)]
  KR1. From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards"
  KR2. Evidence at this level's impact bar: "Organization-wide" — ⟨target⟩ by ⟨date⟩

Objective 5: Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers  [source: JFM responsibility (P6)]
  KR1. From ⟨baseline⟩ to ⟨target⟩ by ⟨date⟩ — tied to: "Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers"
  KR2. Evidence at this level's decision rights bar: "Sets technical strategy for a major area" — ⟨target⟩ by ⟨date⟩

MBO areas

Key result areas from this level's responsibilities, each with a standard grounded in the canon leveling rubric where one exists.

Area	Standard	Target	Due
Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence	Consistent with this level's jfm knowledge-application rubric: "Applies visionary, field-shaping expertise across detection, response, architecture, and governance to organization-wide security strategy."	⟨target⟩	⟨date⟩
Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC	Consistent with this level's jfm knowledge-application rubric: "Applies visionary, field-shaping expertise across detection, response, architecture, and governance to organization-wide security strategy."	⟨target⟩	⟨date⟩
Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide	Consistent with this level's jfm knowledge-application rubric: "Applies visionary, field-shaping expertise across detection, response, architecture, and governance to organization-wide security strategy."	⟨target⟩	⟨date⟩
Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards	Consistent with this level's jfm knowledge-application rubric: "Applies visionary, field-shaping expertise across detection, response, architecture, and governance to organization-wide security strategy."	⟨target⟩	⟨date⟩
Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers	Consistent with this level's jfm knowledge-application rubric: "Applies visionary, field-shaping expertise across detection, response, architecture, and governance to organization-wide security strategy."	⟨target⟩	⟨date⟩

Copy / print as textshow ▾

1. Area: Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence  [source: JFM responsibility (P6) — reused, no distinct responsibility content]
   Standard: Consistent with this level's jfm knowledge-application rubric: "Applies visionary, field-shaping expertise across detection, response, architecture, and governance to organization-wide security strategy."
   Target:   ⟨target⟩   Due: ⟨date⟩

2. Area: Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC  [source: JFM responsibility (P6) — reused, no distinct responsibility content]
   Standard: Consistent with this level's jfm knowledge-application rubric: "Applies visionary, field-shaping expertise across detection, response, architecture, and governance to organization-wide security strategy."
   Target:   ⟨target⟩   Due: ⟨date⟩

3. Area: Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide  [source: JFM responsibility (P6) — reused, no distinct responsibility content]
   Standard: Consistent with this level's jfm knowledge-application rubric: "Applies visionary, field-shaping expertise across detection, response, architecture, and governance to organization-wide security strategy."
   Target:   ⟨target⟩   Due: ⟨date⟩

4. Area: Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards  [source: JFM responsibility (P6) — reused, no distinct responsibility content]
   Standard: Consistent with this level's jfm knowledge-application rubric: "Applies visionary, field-shaping expertise across detection, response, architecture, and governance to organization-wide security strategy."
   Target:   ⟨target⟩   Due: ⟨date⟩

5. Area: Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers  [source: JFM responsibility (P6) — reused, no distinct responsibility content]
   Standard: Consistent with this level's jfm knowledge-application rubric: "Applies visionary, field-shaping expertise across detection, response, architecture, and governance to organization-wide security strategy."
   Target:   ⟨target⟩   Due: ⟨date⟩

Scorecard

Only perspectives with real canon backing are shown — no Financial or Customer perspective, since nothing in the canon grounds business-financial or customer measures for a role alone.

Internal process

"Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence"→ ⟨target⟩ by ⟨date⟩
"Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC"→ ⟨target⟩ by ⟨date⟩
"Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide"→ ⟨target⟩ by ⟨date⟩
"Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards"→ ⟨target⟩ by ⟨date⟩
"Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers"→ ⟨target⟩ by ⟨date⟩

Role calibration

Meets the scope bar: "Organization-wide architecture and the hardest problems"→ ⟨target⟩ by ⟨date⟩
Meets the autonomy bar: "Defines direction; minimal oversight"→ ⟨target⟩ by ⟨date⟩
Meets the complexity bar: "Strategic, open-ended problems shaping the technical future"→ ⟨target⟩ by ⟨date⟩
Meets the impact bar: "Organization-wide"→ ⟨target⟩ by ⟨date⟩
Meets the decision rights bar: "Sets technical strategy for a major area"→ ⟨target⟩ by ⟨date⟩
Meets the leadership bar: "Recognized authority; multiplies many teams"→ ⟨target⟩ by ⟨date⟩

Copy / print as textshow ▾

Internal process
  - "Collaborates with department leadership as a trusted advisor and significantly influences the organization's security strategy with full independence"  →  ⟨target⟩ by ⟨date⟩   [source: JFM responsibility (P6)]
  - "Drives complex, field-defining security initiatives across departments and leads high-impact programs spanning detection, response, architecture, and GRC"  →  ⟨target⟩ by ⟨date⟩   [source: JFM responsibility (P6)]
  - "Analyzes and oversees development of information security governance, policies, standards, baselines, and guidelines organization-wide"  →  ⟨target⟩ by ⟨date⟩   [source: JFM responsibility (P6)]
  - "Designs security systems, methodologies, and secure solution architectures (Secure by Design) to meet current and future industry standards"  →  ⟨target⟩ by ⟨date⟩   [source: JFM responsibility (P6)]
  - "Oversees response to major security incidents, coordinating with third-party responders and law enforcement, and reports incidents and trends to executive management while mentoring senior engineers"  →  ⟨target⟩ by ⟨date⟩   [source: JFM responsibility (P6)]

Role calibration
  - Meets the scope bar: "Organization-wide architecture and the hardest problems"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Scope)]
  - Meets the autonomy bar: "Defines direction; minimal oversight"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Autonomy)]
  - Meets the complexity bar: "Strategic, open-ended problems shaping the technical future"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Complexity)]
  - Meets the impact bar: "Organization-wide"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Impact)]
  - Meets the decision rights bar: "Sets technical strategy for a major area"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Decision rights)]
  - Meets the leadership bar: "Recognized authority; multiplies many teams"  →  ⟨target⟩ by ⟨date⟩   [source: level dimension (Leadership)]