ZipRecruiter

Log In

1

Cyber Risk Manager Jobs in Oregon (NOW HIRING)

Deloitte

Cyber Full Stack Manager

Portland, OR · On-site

Translating client business objectives, risk requirements, and policy expectations into technical ... As a Full Stack Engineer Manager in Deloitte Cyber's Digital Trust & Privacy practice, you will ...

9th Way Insignia

Risk and Compliance Analyst

OR · On-site +1

... evolving cyber threats, including external adversaries and insider threats. 9th Way Insignia is ... Develop and implement risk-management processes and programs, including risk identification ...

Indeed

Senior Insurance Analyst

Portland, OR · On-site

... Cyber Liability, Public Liability). * Experience in Insurance/Risk Management (broker, carrier, or in-house) with hands-on experience with enterprise risk management platforms (e.g., Origami Risk)

LUX Infusion

OR · On-site

Conduct identity risk assessments and develop remediation plans. Oversee authentication ... Lead cyber incident response exercises and tabletop simulations. Manage forensic investigations and ...

previous page

Showing results 41-60

All JobsCyber Risk JobsCyber Risk Manager JobsCyber Risk Manager Jobs in Oregon

Cyber Risk Manager information

See Oregon salary details

$54.5K

$117.9K

$179.7K

How much do cyber risk manager jobs pay per year?

As of Sep 10, 2026, the average yearly pay for cyber risk manager in Oregon is $117,947.00, according to ZipRecruiter salary data. Most workers in this role earn between $95,200.00 and $136,400.00 per year, depending on experience, location, and employer.

How does a cyber risk manager collaborate with other departments to strengthen an organization's cybersecurity posture?

A Cyber Risk Manager frequently works with IT, legal, compliance, and business units to identify, assess, and mitigate cyber risks across the organization. This collaboration involves leading risk assessments, facilitating security awareness training, and ensuring that cybersecurity policies align with business objectives. Regular cross-department meetings and incident response simulations are common, fostering a shared responsibility for cyber resilience. Effective communication and relationship-building skills are essential in this role to bridge technical and non-technical teams.

What are the key skills and qualifications needed to thrive as a cyber risk manager, and why are they important?

To thrive as a Cyber Risk Manager, you need a solid background in information security, risk assessment, and compliance, often supported by a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), GRC tools, and relevant certifications like CISSP or CISM is typically required. Excellent analytical thinking, communication, and leadership skills set top performers apart in this role. These skills are crucial for identifying risks, implementing effective controls, and ensuring the organization’s digital assets remain secure and compliant.

What is the difference between Cyber Risk Manager vs Cybersecurity Analyst?

AspectCyber Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability testing
Employer & Industry UsageFinancial, healthcare, large enterprisesIT departments, security firms, corporate environments

The Cyber Risk Manager focuses on identifying, assessing, and mitigating organizational cyber risks through strategic planning and policy development. In contrast, the Cybersecurity Analyst primarily monitors security systems, responds to incidents, and tests vulnerabilities. Both roles require certifications like CISSP, but their daily tasks and focus areas differ significantly, with the manager taking a broader, strategic approach and the analyst handling operational security tasks.

How much does a cyber risk manager make?

A cyber risk manager's salary typically ranges from $90,000 to $150,000 annually, depending on experience, certifications, and industry. Senior roles or those in high-demand sectors can earn higher compensation, often supplemented with bonuses and benefits.

What does a cyber risk manager do?

A cyber risk manager assesses and mitigates cybersecurity threats to an organization’s information systems. They identify vulnerabilities, develop risk management strategies, and implement security controls, often using tools like risk assessment frameworks and security software. Certification such as CISSP or CISM can enhance their effectiveness in managing cyber risks.

What are popular job titles related to Cyber Risk Manager jobs in Oregon?

For Cyber Risk Manager jobs in Oregon, the most frequently searched job titles are:

What job categories do people searching Cyber Risk Manager jobs in Oregon look for?

The top searched job categories for Cyber Risk Manager jobs in Oregon are:

Cyber Risk Manager jobs near you
Infographic showing various Cyber Risk Manager job openings in Oregon as of August 2026, with employment types broken down into 84% Full Time, 15% Part Time, and 1% Contract. Highlights an 81% Physical, 2% Hybrid, and 17% Remote job distribution, with an average salary of $117,947 per year, or $56.7 per hour.

Cyber Full Stack Manager

Portland, OR • On-site

Deloitte
Finance and Insurance • 10K+ employees
Learn more about Deloitteexternal

Full-time

Posted 24 days ago

Key responsibilities

  • Lead the design, development, integration, deployment, testing, and troubleshooting of production-grade solutions within client environments, including AI and data protection capabilities.

  • Build APIs, automations, workflows, integrations, dashboards, and embed governance into development and deployment workflows through automated controls and continuous monitoring.

  • Manage client delivery across scope, timelines, quality, and satisfaction, while resolving implementation, integration, data, and deployment challenges.

Deloitte rating

8.2

Company rating: 8.2 out of 10

Based on 93 frontline employees who took The Breakroom Quiz

48th of 154 rated financial services

Job description

As a Full Stack Engineer Manager in Deloitte Cyber's Digital Trust & Privacy practice, you will operate at the intersection of client-facing advisory, product engineering, and hands-on technical delivery. You will help clients address complex challenges across digital trust, online protection, privacy, artificial intelligence governance, and data protection by translating business and regulatory requirements into scalable, production-grade technology solutions.

Full Stack Engineers work directly in client environments to architect, build, integrate, deploy, and improve solutions. Depending on the engagement, you may develop trust and safety capabilities, implement product compliance controls, operationalize privacy-by-design practices, build governance for generative or agentic AI, or deploy data protection and cryptographic solutions. These capabilities support Deloitte's broader Digital Trust & Privacy mission: helping organizations build confidence in their digital products, platforms, services, data practices, and customer interactions.

This role is designed for a technically strong consultant who can move from ambiguity to implementation, collaborate with product and engineering teams, and communicate effectively with business, security, privacy, legal, and compliance stakeholders.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a Manager, Strategy, Growth and Transformation on the Digital Trust & Privacy team, you will be responsible for:

  • Translating client business objectives, risk requirements, and policy expectations into technical architectures, product requirements, engineering backlogs, and implementation plans
  • Leading the design, development, integration, deployment, testing, and troubleshooting of production-grade solutions within client environments, including artificial intelligence (AI) and generative AI (GenAI)-enabled capabilities, technical guardrails, and data protection integrations
  • Building application programming interfaces (APIs), automations, workflows, integrations, dashboards, and other technical components, while embedding governance into development and deployment workflows through automated checkpoints, controls-as-code, policy enforcement, and continuous monitoring
  • Prototyping and iterating rapidly with clients and internal specialists to validate approaches, shape solution direction, and support pursuits through demonstrations, proofs of concept, estimates, and pricing inputs
  • Managing client delivery across scope, timelines, quality, client satisfaction, financials, and continuous improvement, while resolving implementation, integration, data, and deployment challenges
  • Leading multidisciplinary teams and building reusable accelerators, documentation, knowledge transfer, and engineering best practices across engagements

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Deloitte Cyber's Digital Trust & Privacy practice helps organizations build and sustain confidence in their digital products, platforms, services, data practices, and customer experiences. Our work brings together digital trust, online protection, privacy, AI governance, identity, data protection, cybersecurity, and regulatory compliance capabilities.

The Full Stack Engineer team is a multidisciplinary engineering group that turns these capabilities into practical solutions. We work alongside client product, engineering, security, privacy, data, risk, compliance, and business teams to move from strategy and policy to implementation and measurable outcomes.

Our work may include:

  • Helping digital platforms improve trust and safety and address online harms
  • Enabling product teams to meet privacy and product compliance expectations
  • Building technical governance and guardrails for generative and agentic AI
  • Protecting sensitive data across cloud, collaboration, application, and enterprise environments
  • Implementing data discovery, classification, data loss prevention (DLP), encryption, public key infrastructure (PKI), and related cryptographic capabilities
  • Developing Deloitte products and accelerators that make complex digital trust and privacy capabilities easier to deploy and operate

The team values technical curiosity, practical problem solving, disciplined engineering, client empathy, and the ability to make complex requirements actionable.

Qualifications

Required:

  • Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or equivalent demonstrated experience
  • 7+ years of experience translating client requirements into target-state solution architectures using Representational State Transfer (REST) application programming interfaces, microservices, event-driven architectures, or serverless components
  • 7+ years of experience building and deploying production-grade solutions using Python, Java, or Node.js, and 2+ years of experience delivering solutions on Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP), including containers, continuous integration and continuous delivery (CI/CD) pipelines, and version control tools
  • 1+ years of experience designing or deploying generative artificial intelligence (AI) or large language model (LLM) solutions in a client or production environment, including experience delivering, governing, or operationalizing generative AI, LLM, or agentic AI solutions
  • Experience in one or more of the following: digital trust and online protection, trust and safety, security, product compliance, privacy, AI governance, data protection, or cryptography; and experience leading technical workstreams, multidisciplinary teams, or engineering delivery teams; managing delivery scope, timelines, quality, risks, dependencies, and client communications; coaching or mentoring other professionals; and shaping pursuits, estimates, prototypes, technical demonstrations, or solution proposals
  • Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Experience with JavaScript or TypeScript and React or Next.js for application or demo development
  • Experience developing or deploying technical controls for generative AI, LLM, or agentic AI applications
  • Experience with AI use-case inventories, risk tiering, human oversight, tool access controls, prompt-injection mitigations, logging, monitoring, or controls-as-code
  • Experience in regulated industries such as financial services, healthcare, or public sector environments, including work aligned to Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI DSS), Federal Financial Institutions Examination Council (FFIEC), Health Insurance Portability and Accountability Act (HIPAA), or General Data Protection Regulation (GDPR)
  • Experience with Kubernetes, GitOps, Elasticsearch, OpenSearch, Neo4j, PyTorch, or TensorFlow
  • Experience owning product roadmaps, technical backlogs, or reusable engineering assets, and experience working with senior client stakeholders to facilitate architecture or risk decisions

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $148,200 to $292,300.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

#CyberDTP27

Qualifications:

As a Full Stack Engineer Manager in Deloitte Cyber's Digital Trust & Privacy practice, you will operate at the intersection of client-facing advisory, product engineering, and hands-on technical delivery. You will help clients address complex challenges across digital trust, online protection, privacy, artificial intelligence governance, and data protection by translating business and regulatory requirements into scalable, production-grade technology solutions.

Full Stack Engineers work directly in client environments to architect, build, integrate, deploy, and improve solutions. Depending on the engagement, you may develop trust and safety capabilities, implement product compliance controls, operationalize privacy-by-design practices, build governance for generative or agentic AI, or deploy data protection and cryptographic solutions. These capabilities support Deloitte's broader Digital Trust & Privacy mission: helping organizations build confidence in their digital products, platforms, services, data practices, and customer interactions.

This role is designed for a technically strong consultant who can move from ambiguity to implementation, collaborate with product and engineering teams, and communicate effectively with business, security, privacy, legal, and compliance stakeholders.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a Manager, Strategy, Growth and Transformation on the Digital Trust & Privacy team, you will be responsible for:

  • Translating client business objectives, risk requirements, and policy expectations into technical architectures, product requirements, engineering backlogs, and implementation plans
  • Leading the design, development, integration, deployment, testing, and troubleshooting of production-grade solutions within client environments, including artificial intelligence (AI) and generative AI (GenAI)-enabled capabilities, technical guardrails, and data protection integrations
  • Building application programming interfaces (APIs), automations, workflows, integrations, dashboards, and other technical components, while embedding governance into development and deployment workflows through automated checkpoints, controls-as-code, policy enforcement, and continuous monitoring
  • Prototyping and iterating rapidly with clients and internal specialists to validate approaches, shape solution direction, and support pursuits through demonstrations, proofs of concept, estimates, and pricing inputs
  • Managing client delivery across scope, timelines, quality, client satisfaction, financials, and continuous improvement, while resolving implementation, integration, data, and deployment challenges
  • Leading multidisciplinary teams and building reusable accelerators, documentation, knowledge transfer, and engineering best practices across engagements

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Deloitte Cyber's Digital Trust & Privacy practice helps organizations build and sustain confidence in their digital products, platforms, services, data practices, and customer experiences. Our work brings together digital trust, online protection, privacy, AI governance, identity, data protection, cybersecurity, and regulatory compliance capabilities.

The Full Stack Engineer team is a multidisciplinary engineering group that turns these capabilities into practical solutions. We work alongside client product, engineering, security, privacy, data, risk, compliance, and business teams to move from strategy and policy to implementation and measurable outcomes.

Our work may include:

  • Helping digital platforms improve trust and safety and address online harms
  • Enabling product teams to meet privacy and product compliance expectations
  • Building technical governance and guardrails for generative and agentic AI
  • Protecting sensitive data across cloud, collaboration, application, and enterprise environments
  • Implementing data discovery, classification, data loss prevention (DLP), encryption, public key infrastructure (PKI), and related cryptographic capabilities
  • Developing Deloitte products and accelerators that make complex digital trust and privacy capabilities easier to deploy and operate

The team values technical curiosity, practical problem solving, disciplined engineering, client empathy, and the ability to make complex requirements actionable.

Qualifications

Required:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply