ZipRecruiter

Log In

1

Cyber Risk Manager Jobs in Buffalo, NY (NOW HIRING)

Keybank

Sr. Cybersecurity Operational Risk Officer

Amherst, NY · On-site

$92K - $118K/yr

... access management, and cyber defenses - along with emerging AI security risk and AI governance ... frameworks. Candidates should have a background and proven, ability to identify material risks ...

M&T Bank

Head of Cybersecurity Defense Operations

Buffalo, NY · Hybrid

$107K - $145K/yr

... risk management objectives.. * Provide strategic oversight and leadership for enterprise cyber defense capabilities, including security monitoring, threat detection, incident response, threat ...

M&T Bank

Head of Cybersecurity Defense Operations

Buffalo, NY · On-site

$107K - $145K/yr

... risk management objectives.. * Provide strategic oversight and leadership for enterprise cyber defense capabilities, including security monitoring, threat detection, incident response, threat ...

Deloitte

Cloud Security Engineer Manager

Williamsville, NY · On-site

$130K/yr

Risk & Compliance * Identity & Access Management * Data Protection * Cyber Design * Incident ... Response * Security Architecture * Business Partnership Qualifications Required: * Bachelor ...

Deloitte

Lead Cloud Security Analyst

Williamsville, NY · On-site

Risk & Compliance * Identity & Access Management * Data Protection * Cyber Design * Incident Response * Security Architecture * Business Partnership Qualifications Required: * Bachelor's Degree or ...

next page

Showing results 1-20

All JobsCyber Risk JobsCyber Risk Manager JobsCyber Risk Manager Jobs in Buffalo, NY

Cyber Risk Manager information

See Buffalo, NY salary details

$49.9K

$108.1K

$164.7K

How much do cyber risk manager jobs pay per year?

As of Aug 23, 2026, the average yearly pay for cyber risk manager in Buffalo, NY is $108,060.00, according to ZipRecruiter salary data. Most workers in this role earn between $87,200.00 and $125,000.00 per year, depending on experience, location, and employer.

How does a cyber risk manager collaborate with other departments to strengthen an organization's cybersecurity posture?

A Cyber Risk Manager frequently works with IT, legal, compliance, and business units to identify, assess, and mitigate cyber risks across the organization. This collaboration involves leading risk assessments, facilitating security awareness training, and ensuring that cybersecurity policies align with business objectives. Regular cross-department meetings and incident response simulations are common, fostering a shared responsibility for cyber resilience. Effective communication and relationship-building skills are essential in this role to bridge technical and non-technical teams.

What are the key skills and qualifications needed to thrive as a cyber risk manager, and why are they important?

To thrive as a Cyber Risk Manager, you need a solid background in information security, risk assessment, and compliance, often supported by a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), GRC tools, and relevant certifications like CISSP or CISM is typically required. Excellent analytical thinking, communication, and leadership skills set top performers apart in this role. These skills are crucial for identifying risks, implementing effective controls, and ensuring the organization’s digital assets remain secure and compliant.

What is the difference between Cyber Risk Manager vs Cybersecurity Analyst?

AspectCyber Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability testing
Employer & Industry UsageFinancial, healthcare, large enterprisesIT departments, security firms, corporate environments

The Cyber Risk Manager focuses on identifying, assessing, and mitigating organizational cyber risks through strategic planning and policy development. In contrast, the Cybersecurity Analyst primarily monitors security systems, responds to incidents, and tests vulnerabilities. Both roles require certifications like CISSP, but their daily tasks and focus areas differ significantly, with the manager taking a broader, strategic approach and the analyst handling operational security tasks.

How much does a cyber risk manager make?

A cyber risk manager's salary typically ranges from $90,000 to $150,000 annually, depending on experience, certifications, and industry. Senior roles or those in high-demand sectors can earn higher compensation, often supplemented with bonuses and benefits.

What does a cyber risk manager do?

A cyber risk manager assesses and mitigates cybersecurity threats to an organization’s information systems. They identify vulnerabilities, develop risk management strategies, and implement security controls, often using tools like risk assessment frameworks and security software. Certification such as CISSP or CISM can enhance their effectiveness in managing cyber risks.

What are popular job titles related to Cyber Risk Manager jobs in Buffalo, NY?

For Cyber Risk Manager jobs in Buffalo, NY, the most frequently searched job titles are:

What job categories do people searching Cyber Risk Manager jobs in Buffalo, NY look for?

The top searched job categories for Cyber Risk Manager jobs in Buffalo, NY are:

What cities near Buffalo, NY are hiring for Cyber Risk Manager jobs?

Cities near Buffalo, NY with the most Cyber Risk Manager job openings:

Cyber Risk Manager jobs near you
Infographic showing various Cyber Risk Manager job openings in Buffalo, NY as of August 2026, with employment types broken down into 100% Full Time. Highlights an 71% In-person, and 29% Remote job distribution, with an average salary of $108,060 per year, or $52 per hour.

Advanced Cyber Threat Response & Forensics Lead/Manager

Deloitte

Williamsville, NY

$101K - $136K/yr

Full-time

Re-posted 3 hours ago

Deloitte rating

8.2

Company rating: 8.2 out of 10

Based on 93 frontline employees who took The Breakroom Quiz

45th of 151 rated financial services

Job description

Deloitte's Cyber Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.

Recruiting for this role ends on 12/31/2026

Job Summary

We are seeking an experienced professional to join our Cyber Defense and Resilience team, who will have extensive experience in Cyber Incident Response. This role involves supporting our client teams in defining, delivering and improving their Cyber Incident Response program to be able to support client's Readiness, Response, and Recovery from Cyber incidents or other crises and events. The candidate will also act as an integrator and champion internally and drive the definition, design, and deployment of solutions and services to advance Deloitte Cyber's Crisis & Incident Response and Technical Resilience offerings.

Responsibilities

Experience in leading the full lifecycle of Cyber incident response, manage and execute incident response engagements for clients, including investigations, containment, remediation, and recovery activities. Review deliverables and coordinate technical sessions to ensure high-quality service and Prepare incident reports, technical documentation, and client communications; maintain high standards for clarity and accuracy.

Create and enhance client's Crisis & Incident Response solutions based on industry standards such as ISO 27001, NIST, and CIS to advance Cyber incident readiness, response and recovery utilizing various related technologies. Identify opportunities for process optimization and continuous improvement in incident monitoring, detection, and response.

  • Team Management: Strong leadership and team management skills. Supervise and mentor team members (US and US-India), fostering skills development, high performance, and collaborative delivery.
  • Champion Cyber Crisis & Incident Response Solutions: Champion the development of Deloitte's Cyber Defense & Resilience market offerings around Crisis & Incident Response and Technical Resilience, ensuring alignment with industry best practices, leading technologies, and evolving client needs related to risk and threats.
  • Drive Continuous Improvement: Utilize industry-leading practices and technology-based tools or methodologies to enhance the monitoring, delivery, and reliability of Deloitte Cyber's services provided to clients.
  • Offer Thought Leadership and Training: Provide guidance on industry leading practices for development, while participating in the evaluation of new requirements. Contribute to the development of security awareness and training initiatives as necessary.
  • Manage and Mentor Teams: Lead and mentor a US and US-India team, ensuring the effective delivery of technology risk management services and capabilities

Qualifications

Required:

  • 10+ years of hands-on experience on Cyber Defense & Resilience solutions, including but not limited to cyber incident response, cyber resilience, and initiating / leading cyber transformation programs.
  • BS/BA degree
  • Limited visa sponsorship may be available
  • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

#CyberCDR27

Qualifications:

Deloitte's Cyber Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.

Recruiting for this role ends on 12/31/2026

Job Summary

We are seeking an experienced professional to join our Cyber Defense and Resilience team, who will have extensive experience in Cyber Incident Response. This role involves supporting our client teams in defining, delivering and improving their Cyber Incident Response program to be able to support client's Readiness, Response, and Recovery from Cyber incidents or other crises and events. The candidate will also act as an integrator and champion internally and drive the definition, design, and deployment of solutions and services to advance Deloitte Cyber's Crisis & Incident Response and Technical Resilience offerings.

Responsibilities

Experience in leading the full lifecycle of Cyber incident response, manage and execute incident response engagements for clients, including investigations, containment, remediation, and recovery activities. Review deliverables and coordinate technical sessions to ensure high-quality service and Prepare incident reports, technical documentation, and client communications; maintain high standards for clarity and accuracy.

Create and enhance client's Crisis & Incident Response solutions based on industry standards such as ISO 27001, NIST, and CIS to advance Cyber incident readiness, response and recovery utilizing various related technologies. Identify opportunities for process optimization and continuous improvement in incident monitoring, detection, and response.

  • Team Management: Strong leadership and team management skills. Supervise and mentor team members (US and US-India), fostering skills development, high performance, and collaborative delivery.
  • Champion Cyber Crisis & Incident Response Solutions: Champion the development of Deloitte's Cyber Defense & Resilience market offerings around Crisis & Incident Response and Technical Resilience, ensuring alignment with industry best practices, leading technologies, and evolving client needs related to risk and threats.
  • Drive Continuous Improvement: Utilize industry-leading practices and technology-based tools or methodologies to enhance the monitoring, delivery, and reliability of Deloitte Cyber's services provided to clients.
  • Offer Thought Leadership and Training: Provide guidance on industry leading practices for development, while participating in the evaluation of new requirements. Contribute to the development of security awareness and training initiatives as necessary.
  • Manage and Mentor Teams: Lead and mentor a US and US-India team, ensuring the effective delivery of technology risk management services and capabilities

Qualifications

Required:

  • 10+ years of hands-on experience on Cyber Defense & Resilience solutions, including but not limited to cyber incident response, cyber resilience, and initiating / leading cyber transformation programs.
  • BS/BA degree
  • Limited visa sponsorship may be available
  • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

#CyberCDR27

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply