ZipRecruiter

Log In

1

Cyber Risk Assessment Jobs in California (NOW HIRING)

Cowbell Cyber Inc.

Claims Specialist

Pleasanton, CA · On-site +1

Championing adaptive insurance, Cowbell follows policyholders' cyber risk exposures as they evolve through continuous risk assessment and continuous underwriting. In its unique AI-based approach to ...

Cowbell Cyber Inc.

Claims Specialist

Pleasanton, CA · On-site +1

Championing adaptive insurance, Cowbell follows policyholders' cyber risk exposures as they evolve through continuous risk assessment and continuous underwriting. In its unique AI-based approach to ...

Lockheed Martin

Cyber Sys Secur Engr Stf

Sunnyvale, CA · On-site

$123K - $217K/yr

Conduct cyber risk assessment activities including threat modeling, vulnerability analysis and analysis of mitigation solutions. Coordinates and addresses Supply Chain risk management concerns.

Deloitte

Senior Manager - ServiceNow

Costa Mesa, CA · On-site

Includes design of the cyber organization, governance, and risk assessments. Qualifications Required: * BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering ...

Deloitte

Senior Manager - ServiceNow

Los Angeles, CA · On-site

Includes design of the cyber organization, governance, and risk assessments. Qualifications Required: * BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering ...

next page

Showing results 1-20

All JobsCyber Risk Assessment JobsCyber Risk Assessment Jobs in California

Cyber Risk Assessment information

What is the difference between Cyber Risk Assessment vs Cyber Security Analyst?

AspectCyber Risk AssessmentCyber Security Analyst
Primary FocusIdentifying and evaluating cybersecurity risks and vulnerabilitiesMonitoring, detecting, and responding to security threats
CertificationsCompTIA Security+, CISSP, CISACompTIA Security+, CEH, CISSP
Work EnvironmentRisk management teams, consulting firms, security departmentsSecurity operations centers, IT departments, incident response teams
ResponsibilitiesRisk analysis, vulnerability assessments, complianceThreat detection, incident response, security monitoring

While both roles involve cybersecurity, Cyber Risk Assessments focus on evaluating potential risks and vulnerabilities to inform security strategies, whereas Cyber Security Analysts actively monitor and respond to ongoing security threats. Understanding these differences helps organizations assign the right roles for comprehensive cybersecurity management.

How much does a cyber risk analyst make?

A cyber risk analyst typically earns between $70,000 and $120,000 annually, depending on experience, certifications, and location. Entry-level positions may start lower, while experienced analysts with certifications like CISSP or CISA can earn higher salaries, especially in industries with high cybersecurity demands.

What is a cyber risk assessment?

A cyber risk assessment is a process used to identify, evaluate, and prioritize potential threats and vulnerabilities in an organization's information systems. It helps organizations understand the potential impact of cyber threats and determine the likelihood of such events occurring. By conducting a cyber risk assessment, businesses can implement appropriate security controls and strategies to mitigate risks, comply with regulatory requirements, and protect sensitive data from cyberattacks. Regular assessments are essential to adapt to evolving threats and maintain a strong cybersecurity posture.

What are some common challenges faced by professionals in Cyber Risk Assessment, and how can they be addressed?

Professionals in Cyber Risk Assessment often encounter challenges such as rapidly evolving threat landscapes, keeping up with regulatory changes, and ensuring clear communication of technical risks to non-technical stakeholders. To address these, staying current with industry trends through continuous learning, leveraging robust risk assessment frameworks, and developing strong communication skills are essential. Additionally, collaborating closely with IT, compliance, and business units helps ensure comprehensive and effective risk management.

What are the key skills and qualifications needed to thrive as a Cyber Risk Assessor, and why are they important?

To thrive as a Cyber Risk Assessor, you need a strong understanding of cybersecurity principles, risk management frameworks, and relevant regulations, often backed by a degree in information security or related certifications like CISSP or CISA. Familiarity with security assessment tools, vulnerability scanners, and risk analysis platforms is typically required. Analytical thinking, attention to detail, and effective communication are vital soft skills for accurately identifying threats and conveying risks to stakeholders. These skills and qualities are crucial for protecting organizational assets and ensuring compliance in an evolving threat landscape.

Can you make $200,000 in cyber security?

Cyber Risk Assessment professionals can potentially earn $200,000 or more annually, especially with advanced certifications like CISSP or CISA, extensive experience, and roles in high-demand industries or senior positions. Salaries vary based on location, company size, and individual expertise, with senior analysts and managers often reaching or exceeding this level.

Is SOC an entry level job?

A Security Operations Center (SOC) analyst role is typically not entry-level and often requires some experience in cybersecurity, network monitoring, or related fields. Entry-level positions in cybersecurity may include roles like SOC analyst trainees or junior analysts, but more advanced SOC positions usually demand certifications such as CompTIA Security+ or Certified SOC Analyst (CSA) and familiarity with security tools and incident response processes.

Can you make $500,000 a year in cyber security?

Cyber Risk Assessment professionals typically earn between $80,000 and $150,000 annually, depending on experience, certifications, and location. Reaching a $500,000 salary generally requires senior roles such as Chief Information Security Officer (CISO) or executive-level positions, which involve strategic leadership, extensive experience, and often additional responsibilities. High salaries in cybersecurity are usually associated with leadership, specialized skills, or working in large organizations or high-demand industries.
What are popular job titles related to Cyber Risk Assessment jobs in California? For Cyber Risk Assessment jobs in California, the most frequently searched job titles are:
What job categories do people searching Cyber Risk Assessment jobs in California look for? The top searched job categories for Cyber Risk Assessment jobs in California are:
What cities in California are hiring for Cyber Risk Assessment jobs? Cities in California with the most Cyber Risk Assessment job openings:
Cyber Risk Assessment jobs near you
Infographic showing various Cyber Risk Assessment job openings in California as of June 2026, with employment types broken down into 1% As Needed, 92% Full Time, 4% Part Time, 1% Temporary, and 2% Contract. Highlights an 93% Physical, 3% Hybrid, and 4% Remote job distribution.
Expert Cyber Risk Management Engineer

Expert Cyber Risk Management Engineer

Resource Consultings Services Inc.

Oakland, CA • On-site

Contractor

Posted 23 days ago

Job description

Position: Expert Cyber Risk Management Engineer

Location: Oakland, CA (Onsite only)

Duration: Contract to Hire

Tentative Start Date: Nov/03/2025

Job Description:

This is a temp to hire opportunity
Ideal candidate will reside local to Oakland, CA

Responsibilities

  • Develop processes, maintain internal frameworks, create documentation templates, and implement tooling to support and mature assurance service delivery.
  • Collaborate with security specialists, enterprise architects, and other technical leaders to ensure security solutions sufficiently mitigate risks and align with business objectives and regulatory requirements.
  • Analyze risk exposure and consult on the design of cyber risk management capabilities where improvements are needed.
  • Assess the effectiveness of cybersecurity capabilities, provide guidance on managing risks associated with ineffective controls, and influence decision-making by educating stakeholders.
  • Track and report issue status, ensuring timely resolution of identified risks.
  • Communicate cybersecurity risks and solutions to technical and non-technical audiences across all levels of management.
  • Advise on enterprise-level decisions by presenting insights to senior leadership, including technology executives and governance bodies.
  • Collaborate with legal, compliance, and audit teams to ensure alignment with regulatory expectations and contractual obligations.
  • Maintain ongoing communication with leadership regarding developments in assigned areas and contribute to special projects as needed.
  • Provide thought leadership and consulting support in the creation and maintenance of security-enabled processes across cybersecurity and technology teams.
  • Mentor team members on technical topics, interpersonal dynamics, organizational policies, and enterprise operations.
  • Partner with infrastructure, application, and data teams to ensure security controls are embedded across technology lifecycles and operational processes.
  • Conduct regular risk assessments to ensure compliance with internal policies, external regulations, and industry standards; update unified requirements and document corrective actions.
  • Define and track key performance indicators (KPIs) for cyber risk management capabilities, including issue closure rates, control effectiveness, and remediation timelines.
  • Stay current with emerging threats, trends, and technologies, and provide strategic recommendations to enhance the organizations security posture.
  • Contribute to the development and enforcement of cybersecurity policies, standards, and guidelines to ensure consistent and effective practices.
  • Advise on the selection and implementation of security tools and technologies aligned with the cyber risk management strategy.

Qualifications

  • Strong communication skills, with emphasis on active listening and clarity.
  • Demonstrated empathy and ability to build trust within teams.
  • Proven ability to research and maintain current technical knowledge in a rapidly evolving environment.
  • Experience with Azure and Oracle public cloud infrastructures.
  • Expertise in preparing business plans, IT strategies, technology roadmaps, and technical proposals.
  • Ability to analyze business requirements and recommend timely, effective solutions.
  • Demonstrated creativity and problem-solving skills in directing analysis and developing solutions.
  • Knowledge of project development life cycle, with ability to coordinate and prioritize multiple initiatives.