ZipRecruiter

Log In

1

Cyber Risk Assessment Jobs in California (NOW HIRING)

Deloitte

Cyber Insider Risk Manager

Los Angeles, CA · On-site

Cyber Defense & Resilience - Insider Risk Manager Are you interested in working in a dynamic ... Developing comprehensive strategies for insider risk programs, including program assessments and ...

Deloitte

Cyber Insider Risk Manager

San Francisco, CA · On-site

Cyber Defense & Resilience - Insider Risk Manager Are you interested in working in a dynamic ... Developing comprehensive strategies for insider risk programs, including program assessments and ...

Cowbell Cyber Inc.

Claims Counsel

Pleasanton, CA · On-site

$165K/yr

Championing adaptive insurance, Cowbell follows policyholders' cyber risk exposures as they evolve through continuous risk assessment and continuous underwriting. In its unique AI-based approach to ...

Okta

Senior Director, GRC

San Francisco, CA · On-site

You will blend deep domain expertise across enterprise cyber risk, audit, and global compliance ... Direct high-impact vendor risk assessment programs, ensuring third-party SaaS tools and supply ...

Apogee Global RMS

Senior Risk Analyst

San Jose, CA · On-site +1

Conduct cross-domain risk research across strategic, operational, financial, human-capital, cyber, and regulatory domains * Support development of risk dashboards, assessments, and client ...

next page

Showing results 1-20

All JobsCyber Risk Assessment JobsCyber Risk Assessment Jobs in California

Cyber Risk Assessment information

What is a cyber risk assessment?

A cyber risk assessment is a process used to identify, evaluate, and prioritize potential threats and vulnerabilities in an organization's information systems. It helps organizations understand the potential impact of cyber threats and determine the likelihood of such events occurring. By conducting a cyber risk assessment, businesses can implement appropriate security controls and strategies to mitigate risks, comply with regulatory requirements, and protect sensitive data from cyberattacks. Regular assessments are essential to adapt to evolving threats and maintain a strong cybersecurity posture.

What are the key skills and qualifications needed to thrive as a cyber risk assessor?

To thrive as a Cyber Risk Assessor, you need a strong understanding of cybersecurity principles, risk management frameworks, and relevant regulations, often backed by a degree in information security or related certifications like CISSP or CISA. Familiarity with security assessment tools, vulnerability scanners, and risk analysis platforms is typically required. Analytical thinking, attention to detail, and effective communication are vital soft skills for accurately identifying threats and conveying risks to stakeholders. These skills and qualities are crucial for protecting organizational assets and ensuring compliance in an evolving threat landscape.

What are some common challenges faced by professionals in cyber risk assessment, and how can they be addressed?

Professionals in Cyber Risk Assessment often encounter challenges such as rapidly evolving threat landscapes, keeping up with regulatory changes, and ensuring clear communication of technical risks to non-technical stakeholders. To address these, staying current with industry trends through continuous learning, leveraging robust risk assessment frameworks, and developing strong communication skills are essential. Additionally, collaborating closely with IT, compliance, and business units helps ensure comprehensive and effective risk management.

What is the difference between Cyber Risk Assessment vs Cyber Security Analyst?

AspectCyber Risk AssessmentCyber Security Analyst
Primary FocusIdentifying and evaluating cybersecurity risks and vulnerabilitiesMonitoring, detecting, and responding to security threats
CertificationsCompTIA Security+, CISSP, CISACompTIA Security+, CEH, CISSP
Work EnvironmentRisk management teams, consulting firms, security departmentsSecurity operations centers, IT departments, incident response teams
ResponsibilitiesRisk analysis, vulnerability assessments, complianceThreat detection, incident response, security monitoring

While both roles involve cybersecurity, Cyber Risk Assessments focus on evaluating potential risks and vulnerabilities to inform security strategies, whereas Cyber Security Analysts actively monitor and respond to ongoing security threats. Understanding these differences helps organizations assign the right roles for comprehensive cybersecurity management.

What are popular job titles related to Cyber Risk Assessment jobs in California?

For Cyber Risk Assessment jobs in California, the most frequently searched job titles are:

What job categories do people searching Cyber Risk Assessment jobs in California look for?

The top searched job categories for Cyber Risk Assessment jobs in California are:

What cities in California are hiring for Cyber Risk Assessment jobs?

Cities in California with the most Cyber Risk Assessment job openings:

Cyber Risk Assessment jobs near you
Infographic showing various Cyber Risk Assessment job openings in California as of September 2026, with employment types broken down into 1% As Needed, 85% Full Time, 11% Part Time, 1% Temporary, and 2% Contract. Highlights an 81% Physical, 4% Hybrid, and 15% Remote job distribution.

Expert Cyber Risk Management Engineer

Oakland, CA • On-site

Resource Consultings Services Inc.
Recruiting and Staffing Services • 51 - 200 employees
Learn more about Resource Consultings Services Inc.external

Contractor

Re-posted 4 days ago

Job description

Position: Expert Cyber Risk Management Engineer

Location: Oakland, CA (Onsite only)

Duration: Contract to Hire

Tentative Start Date: Nov/03/2025

Job Description:

This is a temp to hire opportunity
Ideal candidate will reside local to Oakland, CA

Responsibilities

  • Develop processes, maintain internal frameworks, create documentation templates, and implement tooling to support and mature assurance service delivery.
  • Collaborate with security specialists, enterprise architects, and other technical leaders to ensure security solutions sufficiently mitigate risks and align with business objectives and regulatory requirements.
  • Analyze risk exposure and consult on the design of cyber risk management capabilities where improvements are needed.
  • Assess the effectiveness of cybersecurity capabilities, provide guidance on managing risks associated with ineffective controls, and influence decision-making by educating stakeholders.
  • Track and report issue status, ensuring timely resolution of identified risks.
  • Communicate cybersecurity risks and solutions to technical and non-technical audiences across all levels of management.
  • Advise on enterprise-level decisions by presenting insights to senior leadership, including technology executives and governance bodies.
  • Collaborate with legal, compliance, and audit teams to ensure alignment with regulatory expectations and contractual obligations.
  • Maintain ongoing communication with leadership regarding developments in assigned areas and contribute to special projects as needed.
  • Provide thought leadership and consulting support in the creation and maintenance of security-enabled processes across cybersecurity and technology teams.
  • Mentor team members on technical topics, interpersonal dynamics, organizational policies, and enterprise operations.
  • Partner with infrastructure, application, and data teams to ensure security controls are embedded across technology lifecycles and operational processes.
  • Conduct regular risk assessments to ensure compliance with internal policies, external regulations, and industry standards; update unified requirements and document corrective actions.
  • Define and track key performance indicators (KPIs) for cyber risk management capabilities, including issue closure rates, control effectiveness, and remediation timelines.
  • Stay current with emerging threats, trends, and technologies, and provide strategic recommendations to enhance the organizations security posture.
  • Contribute to the development and enforcement of cybersecurity policies, standards, and guidelines to ensure consistent and effective practices.
  • Advise on the selection and implementation of security tools and technologies aligned with the cyber risk management strategy.

Qualifications

  • Strong communication skills, with emphasis on active listening and clarity.
  • Demonstrated empathy and ability to build trust within teams.
  • Proven ability to research and maintain current technical knowledge in a rapidly evolving environment.
  • Experience with Azure and Oracle public cloud infrastructures.
  • Expertise in preparing business plans, IT strategies, technology roadmaps, and technical proposals.
  • Ability to analyze business requirements and recommend timely, effective solutions.
  • Demonstrated creativity and problem-solving skills in directing analysis and developing solutions.
  • Knowledge of project development life cycle, with ability to coordinate and prioritize multiple initiatives.