1

Cyber Risk Manager Jobs in Sacramento, CA (NOW HIRING)

Evaluate and integrate physical security, safety, operational, cyber-physical, and emergency preparedness considerations into comprehensive risk management strategies. * Perform site visits, facility ...

Evaluate and integrate physical security, safety, operational, cyber-physical, and emergency preparedness considerations into comprehensive risk management strategies. * Perform site visits, facility ...

Evaluate and integrate physical security, safety, operational, cyber-physical, and emergency preparedness considerations into comprehensive risk management strategies. * Perform site visits, facility ...

next page

Showing results 1-20

Cyber Risk Manager information

See Sacramento, CA salary details

$56.1K

$121.5K

$185.2K

How much do cyber risk manager jobs pay per year?

As of Aug 22, 2026, the average yearly pay for cyber risk manager in Sacramento, CA is $121,509.00, according to ZipRecruiter salary data. Most workers in this role earn between $98,000.00 and $140,500.00 per year, depending on experience, location, and employer.

How does a cyber risk manager collaborate with other departments to strengthen an organization's cybersecurity posture?

A Cyber Risk Manager frequently works with IT, legal, compliance, and business units to identify, assess, and mitigate cyber risks across the organization. This collaboration involves leading risk assessments, facilitating security awareness training, and ensuring that cybersecurity policies align with business objectives. Regular cross-department meetings and incident response simulations are common, fostering a shared responsibility for cyber resilience. Effective communication and relationship-building skills are essential in this role to bridge technical and non-technical teams.

What are the key skills and qualifications needed to thrive as a cyber risk manager, and why are they important?

To thrive as a Cyber Risk Manager, you need a solid background in information security, risk assessment, and compliance, often supported by a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), GRC tools, and relevant certifications like CISSP or CISM is typically required. Excellent analytical thinking, communication, and leadership skills set top performers apart in this role. These skills are crucial for identifying risks, implementing effective controls, and ensuring the organization’s digital assets remain secure and compliant.

What is the difference between Cyber Risk Manager vs Cybersecurity Analyst?

AspectCyber Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability testing
Employer & Industry UsageFinancial, healthcare, large enterprisesIT departments, security firms, corporate environments

The Cyber Risk Manager focuses on identifying, assessing, and mitigating organizational cyber risks through strategic planning and policy development. In contrast, the Cybersecurity Analyst primarily monitors security systems, responds to incidents, and tests vulnerabilities. Both roles require certifications like CISSP, but their daily tasks and focus areas differ significantly, with the manager taking a broader, strategic approach and the analyst handling operational security tasks.

How much does a cyber risk manager make?

A cyber risk manager's salary typically ranges from $90,000 to $150,000 annually, depending on experience, certifications, and industry. Senior roles or those in high-demand sectors can earn higher compensation, often supplemented with bonuses and benefits.

What does a cyber risk manager do?

A cyber risk manager assesses and mitigates cybersecurity threats to an organization’s information systems. They identify vulnerabilities, develop risk management strategies, and implement security controls, often using tools like risk assessment frameworks and security software. Certification such as CISSP or CISM can enhance their effectiveness in managing cyber risks.

What cities near Sacramento, CA are hiring for Cyber Risk Manager jobs?

Cities near Sacramento, CA with the most Cyber Risk Manager job openings:

Infographic showing various Cyber Risk Manager job openings in Sacramento, CA as of August 2026, with employment types broken down into 85% Full Time, 13% Part Time, and 2% Contract. Highlights an 84% Physical, 2% Hybrid, and 14% Remote job distribution, with an average salary of $121,509 per year, or $58.4 per hour.

Advanced Cyber Threat Response & Forensics Lead/Manager

Deloitte

Sacramento, CA

$118K - $159K/yr

Full-time

Re-posted 28 days ago


Deloitte rating

8.2

Company rating: 8.2 out of 10

Based on 92 frontline employees who took The Breakroom Quiz

45th of 151 rated financial services


Job description

Deloitte's Cyber Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.

Recruiting for this role ends on 12/31/2026

Job Summary

We are seeking an experienced professional to join our Cyber Defense and Resilience team, who will have extensive experience in Cyber Incident Response. This role involves supporting our client teams in defining, delivering and improving their Cyber Incident Response program to be able to support client's Readiness, Response, and Recovery from Cyber incidents or other crises and events. The candidate will also act as an integrator and champion internally and drive the definition, design, and deployment of solutions and services to advance Deloitte Cyber's Crisis & Incident Response and Technical Resilience offerings.

Responsibilities

Experience in leading the full lifecycle of Cyber incident response, manage and execute incident response engagements for clients, including investigations, containment, remediation, and recovery activities. Review deliverables and coordinate technical sessions to ensure high-quality service and Prepare incident reports, technical documentation, and client communications; maintain high standards for clarity and accuracy.

Create and enhance client's Crisis & Incident Response solutions based on industry standards such as ISO 27001, NIST, and CIS to advance Cyber incident readiness, response and recovery utilizing various related technologies. Identify opportunities for process optimization and continuous improvement in incident monitoring, detection, and response.

  • Team Management: Strong leadership and team management skills. Supervise and mentor team members (US and US-India), fostering skills development, high performance, and collaborative delivery.
  • Champion Cyber Crisis & Incident Response Solutions: Champion the development of Deloitte's Cyber Defense & Resilience market offerings around Crisis & Incident Response and Technical Resilience, ensuring alignment with industry best practices, leading technologies, and evolving client needs related to risk and threats.
  • Drive Continuous Improvement: Utilize industry-leading practices and technology-based tools or methodologies to enhance the monitoring, delivery, and reliability of Deloitte Cyber's services provided to clients.
  • Offer Thought Leadership and Training: Provide guidance on industry leading practices for development, while participating in the evaluation of new requirements. Contribute to the development of security awareness and training initiatives as necessary.
  • Manage and Mentor Teams: Lead and mentor a US and US-India team, ensuring the effective delivery of technology risk management services and capabilities

Qualifications

Required:

  • 10+ years of hands-on experience on Cyber Defense & Resilience solutions, including but not limited to cyber incident response, cyber resilience, and initiating / leading cyber transformation programs.
  • BS/BA degree
  • Limited visa sponsorship may be available
  • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

#CyberCDR27

Qualifications:

Deloitte's Cyber Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.

Recruiting for this role ends on 12/31/2026

Job Summary

We are seeking an experienced professional to join our Cyber Defense and Resilience team, who will have extensive experience in Cyber Incident Response. This role involves supporting our client teams in defining, delivering and improving their Cyber Incident Response program to be able to support client's Readiness, Response, and Recovery from Cyber incidents or other crises and events. The candidate will also act as an integrator and champion internally and drive the definition, design, and deployment of solutions and services to advance Deloitte Cyber's Crisis & Incident Response and Technical Resilience offerings.

Responsibilities

Experience in leading the full lifecycle of Cyber incident response, manage and execute incident response engagements for clients, including investigations, containment, remediation, and recovery activities. Review deliverables and coordinate technical sessions to ensure high-quality service and Prepare incident reports, technical documentation, and client communications; maintain high standards for clarity and accuracy.

Create and enhance client's Crisis & Incident Response solutions based on industry standards such as ISO 27001, NIST, and CIS to advance Cyber incident readiness, response and recovery utilizing various related technologies. Identify opportunities for process optimization and continuous improvement in incident monitoring, detection, and response.

  • Team Management: Strong leadership and team management skills. Supervise and mentor team members (US and US-India), fostering skills development, high performance, and collaborative delivery.
  • Champion Cyber Crisis & Incident Response Solutions: Champion the development of Deloitte's Cyber Defense & Resilience market offerings around Crisis & Incident Response and Technical Resilience, ensuring alignment with industry best practices, leading technologies, and evolving client needs related to risk and threats.
  • Drive Continuous Improvement: Utilize industry-leading practices and technology-based tools or methodologies to enhance the monitoring, delivery, and reliability of Deloitte Cyber's services provided to clients.
  • Offer Thought Leadership and Training: Provide guidance on industry leading practices for development, while participating in the evaluation of new requirements. Contribute to the development of security awareness and training initiatives as necessary.
  • Manage and Mentor Teams: Lead and mentor a US and US-India team, ensuring the effective delivery of technology risk management services and capabilities

Qualifications

Required:

  • 10+ years of hands-on experience on Cyber Defense & Resilience solutions, including but not limited to cyber incident response, cyber resilience, and initiating / leading cyber transformation programs.
  • BS/BA degree
  • Limited visa sponsorship may be available
  • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

#CyberCDR27

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom