ZipRecruiter

Log In

1

Cyber Risk Manager Jobs in Buffalo, NY (NOW HIRING)

HSBC

Regional Insurable Risk Manager

Buffalo, NY · On-site

As Regional Insurable Risk Manager you'll own insurable risk management for the US and provide ... Support sourcing of local covers and relevant infills such as Crime, PI and Cyber where needed

next page

Showing results 1-20

All JobsCyber Risk JobsCyber Risk Manager JobsCyber Risk Manager Jobs in Buffalo, NY

Cyber Risk Manager information

See Buffalo, NY salary details

$49.9K

$108.1K

$164.7K

How much do cyber risk manager jobs pay per year?

As of Jul 30, 2026, the average yearly pay for cyber risk manager in Buffalo, NY is $108,060.00, according to ZipRecruiter salary data. Most workers in this role earn between $87,200.00 and $125,000.00 per year, depending on experience, location, and employer.

How does a Cyber Risk Manager typically collaborate with other departments to strengthen an organization's cybersecurity posture?

A Cyber Risk Manager frequently works with IT, legal, compliance, and business units to identify, assess, and mitigate cyber risks across the organization. This collaboration involves leading risk assessments, facilitating security awareness training, and ensuring that cybersecurity policies align with business objectives. Regular cross-department meetings and incident response simulations are common, fostering a shared responsibility for cyber resilience. Effective communication and relationship-building skills are essential in this role to bridge technical and non-technical teams.

What is the difference between Cyber Risk Manager vs Cybersecurity Analyst?

AspectCyber Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability testing
Employer & Industry UsageFinancial, healthcare, large enterprisesIT departments, security firms, corporate environments

The Cyber Risk Manager focuses on identifying, assessing, and mitigating organizational cyber risks through strategic planning and policy development. In contrast, the Cybersecurity Analyst primarily monitors security systems, responds to incidents, and tests vulnerabilities. Both roles require certifications like CISSP, but their daily tasks and focus areas differ significantly, with the manager taking a broader, strategic approach and the analyst handling operational security tasks.

What are the key skills and qualifications needed to thrive as a Cyber Risk Manager, and why are they important?

To thrive as a Cyber Risk Manager, you need a solid background in information security, risk assessment, and compliance, often supported by a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), GRC tools, and relevant certifications like CISSP or CISM is typically required. Excellent analytical thinking, communication, and leadership skills set top performers apart in this role. These skills are crucial for identifying risks, implementing effective controls, and ensuring the organization’s digital assets remain secure and compliant.

Can you make $200,000 in cyber security?

Cyber Risk Managers and senior cybersecurity professionals can earn $200,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and in high-demand industries or locations. Salary levels depend on factors such as expertise, certifications, industry, and geographic region, with leadership roles and specialized skills commanding higher compensation.

Can you make $500,000 a year in cyber security?

Cyber Risk Managers and senior cybersecurity professionals can potentially earn $500,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and leadership roles such as Chief Information Security Officer. High salaries are often associated with large organizations, specialized skills, and strategic responsibilities in cybersecurity management.

What does a cyber risk manager do?

A cyber risk manager assesses and mitigates cybersecurity threats to an organization’s information systems. They develop risk management strategies, implement security policies, and often use tools like risk assessment frameworks and security audits to protect digital assets. Certification such as CISSP or CISM can enhance their effectiveness in this role.

Is a CISO a stressful job?

A Chief Information Security Officer (CISO) role is often considered high-stress due to the responsibility for an organization's cybersecurity strategy, risk management, and incident response. The job requires managing complex threats, compliance requirements, and often involves long hours, especially during security breaches or audits.
What are popular job titles related to Cyber Risk Manager jobs in Buffalo, NY? For Cyber Risk Manager jobs in Buffalo, NY, the most frequently searched job titles are:
What job categories do people searching Cyber Risk Manager jobs in Buffalo, NY look for? The top searched job categories for Cyber Risk Manager jobs in Buffalo, NY are:
What cities near Buffalo, NY are hiring for Cyber Risk Manager jobs? Cities near Buffalo, NY with the most Cyber Risk Manager job openings:
Cyber Risk Manager jobs near you
Infographic showing various Cyber Risk Manager job openings in Buffalo, NY as of July 2026, with employment types broken down into 100% Full Time. Highlights an 71% In-person, and 29% Remote job distribution, with an average salary of $108,060 per year, or $52 per hour.

Advanced Cyber Threat Response & Forensics Lead/Manager

Deloitte

Williamsville, NY

$101K - $136K/yr

Other

Re-posted 6 days ago

Deloitte rating

8.1

Company rating: 8.1 out of 10

Based on 91 frontline employees who took The Breakroom Quiz

56th of 150 rated financial services

Job description

Deloitte's Cyber Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.

Recruiting for this role ends on 12/31/2026

Job Summary

We are seeking an experienced professional to join our Cyber Defense and Resilience team, who will have extensive experience in Cyber Incident Response. This role involves supporting our client teams in defining, delivering and improving their Cyber Incident Response program to be able to support client's Readiness, Response, and Recovery from Cyber incidents or other crises and events. The candidate will also act as an integrator and champion internally and drive the definition, design, and deployment of solutions and services to advance Deloitte Cyber's Crisis & Incident Response and Technical Resilience offerings.

Responsibilities

Experience in leading the full lifecycle of Cyber incident response, manage and execute incident response engagements for clients, including investigations, containment, remediation, and recovery activities. Review deliverables and coordinate technical sessions to ensure high-quality service and Prepare incident reports, technical documentation, and client communications; maintain high standards for clarity and accuracy.

Create and enhance client's Crisis & Incident Response solutions based on industry standards such as ISO 27001, NIST, and CIS to advance Cyber incident readiness, response and recovery utilizing various related technologies. Identify opportunities for process optimization and continuous improvement in incident monitoring, detection, and response.

  • Team Management: Strong leadership and team management skills. Supervise and mentor team members (US and US-India), fostering skills development, high performance, and collaborative delivery.
  • Champion Cyber Crisis & Incident Response Solutions: Champion the development of Deloitte's Cyber Defense & Resilience market offerings around Crisis & Incident Response and Technical Resilience, ensuring alignment with industry best practices, leading technologies, and evolving client needs related to risk and threats.
  • Drive Continuous Improvement: Utilize industry-leading practices and technology-based tools or methodologies to enhance the monitoring, delivery, and reliability of Deloitte Cyber's services provided to clients.
  • Offer Thought Leadership and Training: Provide guidance on industry leading practices for development, while participating in the evaluation of new requirements. Contribute to the development of security awareness and training initiatives as necessary.
  • Manage and Mentor Teams: Lead and mentor a US and US-India team, ensuring the effective delivery of technology risk management services and capabilities

Qualifications

Required:

  • 10+ years of hands-on experience on Cyber Defense & Resilience solutions, including but not limited to cyber incident response, cyber resilience, and initiating / leading cyber transformation programs.
  • BS/BA degree
  • Limited visa sponsorship may be available
  • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

#CyberCDR27

Qualifications:

Deloitte's Cyber Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.

Recruiting for this role ends on 12/31/2026

Job Summary

We are seeking an experienced professional to join our Cyber Defense and Resilience team, who will have extensive experience in Cyber Incident Response. This role involves supporting our client teams in defining, delivering and improving their Cyber Incident Response program to be able to support client's Readiness, Response, and Recovery from Cyber incidents or other crises and events. The candidate will also act as an integrator and champion internally and drive the definition, design, and deployment of solutions and services to advance Deloitte Cyber's Crisis & Incident Response and Technical Resilience offerings.

Responsibilities

Experience in leading the full lifecycle of Cyber incident response, manage and execute incident response engagements for clients, including investigations, containment, remediation, and recovery activities. Review deliverables and coordinate technical sessions to ensure high-quality service and Prepare incident reports, technical documentation, and client communications; maintain high standards for clarity and accuracy.

Create and enhance client's Crisis & Incident Response solutions based on industry standards such as ISO 27001, NIST, and CIS to advance Cyber incident readiness, response and recovery utilizing various related technologies. Identify opportunities for process optimization and continuous improvement in incident monitoring, detection, and response.

  • Team Management: Strong leadership and team management skills. Supervise and mentor team members (US and US-India), fostering skills development, high performance, and collaborative delivery.
  • Champion Cyber Crisis & Incident Response Solutions: Champion the development of Deloitte's Cyber Defense & Resilience market offerings around Crisis & Incident Response and Technical Resilience, ensuring alignment with industry best practices, leading technologies, and evolving client needs related to risk and threats.
  • Drive Continuous Improvement: Utilize industry-leading practices and technology-based tools or methodologies to enhance the monitoring, delivery, and reliability of Deloitte Cyber's services provided to clients.
  • Offer Thought Leadership and Training: Provide guidance on industry leading practices for development, while participating in the evaluation of new requirements. Contribute to the development of security awareness and training initiatives as necessary.
  • Manage and Mentor Teams: Lead and mentor a US and US-India team, ensuring the effective delivery of technology risk management services and capabilities

Qualifications

Required:

  • 10+ years of hands-on experience on Cyber Defense & Resilience solutions, including but not limited to cyber incident response, cyber resilience, and initiating / leading cyber transformation programs.
  • BS/BA degree
  • Limited visa sponsorship may be available
  • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

#CyberCDR27

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply