The increasing frequency and sophistication of cyber threats have intensified the need for effective cybersecurity governance within financial institutions. In the Nigerian financial sector, cybersecurity teams frequently rely on technical security metrics such as vulnerability counts, patching rates, intrusion attempts, and incident detection times to evaluate security performance. However, these metrics are often difficult for executive management, boards of directors, and risk managers to interpret in terms of business impact, resulting in a disconnect between cybersecurity operations and enterprise risk management processes. This study examines the challenges associated with bridging technical security metrics and business risk metrics and proposes an integrated framework to enhance cyber risk communication and decision-making within Nigerian financial institutions. The study adopts a qualitative conceptual research design based on a comprehensive review of scholarly literature, industry reports, regulatory guidelines, and cybersecurity governance frameworks published between 2020 and 2026. Drawing upon Enterprise Risk Management Theory, Institutional Theory, and Socio-Technical Systems Theory, the study develops a framework that translates technical cybersecurity indicators into business-oriented risk measures aligned with organizational objectives and regulatory requirements. The study argues that integrating technical security metrics with business risk metrics improves cyber risk visibility, strengthens governance, enhances executive decision-making, and supports regulatory compliance. The proposed framework contributes to cybersecurity governance literature by providing a structured approach for aligning cybersecurity measurement with business risk management, thereby enabling Nigerian financial institutions to improve resilience and manage cyber risks more effectively in an increasingly digital financial ecosystem.