Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our ...
Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our ...
Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our ...
Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our ...
NOW HIRING FOR DMDC Cyber PRIMES (CPRIMES) CONTRACT
Seaside, CA · On-site
$104K - $166K/yr
DHRA uses the Enterprise Mission Assured Support System (eMASS) to oversee 100 Risk Management ... and cyberspace. The company serves as a valued partner to essential government agencies and ...
NOW HIRING FOR DMDC Cyber PRIMES (CPRIMES) CONTRACT
Seaside, CA · On-site
$104K - $166K/yr
DHRA uses the Enterprise Mission Assured Support System (eMASS) to oversee 100 Risk Management ... and cyberspace. The company serves as a valued partner to essential government agencies and ...
NOW HIRING FOR DMDC Cyber PRIMES (CPRIMES) CONTRACT
$104K - $166K/yr
DHRA uses the Enterprise Mission Assured Support System (eMASS) to oversee 100 Risk Management ... and cyberspace. The company serves as a valued partner to essential government agencies and ...
NOW HIRING FOR DMDC Cyber PRIMES (CPRIMES) CONTRACT
$104K - $166K/yr
DHRA uses the Enterprise Mission Assured Support System (eMASS) to oversee 100 Risk Management ... and cyberspace. The company serves as a valued partner to essential government agencies and ...
NOW HIRING FOR DMDC Cyber PRIMES (CPRIMES) CONTRACT
Seaside, CA · On-site
$104K - $166K/yr
DHRA uses the Enterprise Mission Assured Support System (eMASS) to oversee 100 Risk Management ... and cyberspace. The company serves as a valued partner to essential government agencies and ...
NOW HIRING FOR DMDC Cyber PRIMES (CPRIMES) CONTRACT
Seaside, CA · On-site
$104K - $166K/yr
DHRA uses the Enterprise Mission Assured Support System (eMASS) to oversee 100 Risk Management ... and cyberspace. The company serves as a valued partner to essential government agencies and ...
Cybersecurity Program Manager
$116K - $158K/yr
... cyber threats, ensuring timely mitigation and protection of company assets * Develop and maintain a third-party cybersecurity risk management program to evaluate and validate vendor security ...
Cybersecurity Program Manager
$116K - $158K/yr
... cyber threats, ensuring timely mitigation and protection of company assets * Develop and maintain a third-party cybersecurity risk management program to evaluate and validate vendor security ...
Cybersecurity Program Manager
Watsonville, CA · On-site
$116K - $158K/yr
... cyber threats, ensuring timely mitigation and protection of company assets * Develop and maintain a third-party cybersecurity risk management program to evaluate and validate vendor security ...
Cybersecurity Program Manager
Watsonville, CA · On-site
$116K - $158K/yr
... cyber threats, ensuring timely mitigation and protection of company assets * Develop and maintain a third-party cybersecurity risk management program to evaluate and validate vendor security ...
Senior Information Security Engineer - DOWIN Ops
$114K - $154K/yr
Provide expert guidance on cybersecurity directives and risk management policies; review POA&Ms for ... Familiarity with cyber adversary tactics and frameworks (such as ATT&CK and D3FEND) * Knowledge of ...
Senior Information Security Engineer - DOWIN Ops
$114K - $154K/yr
Provide expert guidance on cybersecurity directives and risk management policies; review POA&Ms for ... Familiarity with cyber adversary tactics and frameworks (such as ATT&CK and D3FEND) * Knowledge of ...
Cybersecurity Analyst SME
Seaside, CA · On-site
Cyber and IT Risk Management Job Qualifications: Skills: Continuous Monitoring, Security Information and Event Management (SIEM), Security Operations Certifications: None Experience: 10 + years of ...
Cybersecurity Analyst SME
Seaside, CA · On-site
Cyber and IT Risk Management Job Qualifications: Skills: Continuous Monitoring, Security Information and Event Management (SIEM), Security Operations Certifications: None Experience: 10 + years of ...
... Center (DMDC) Cyber PRIMES program by administering, maintaining, and optimizing enterprise ... Support Risk Management Framework (RMF) compliance and continuous monitoring activities * Recommend ...
... Center (DMDC) Cyber PRIMES program by administering, maintaining, and optimizing enterprise ... Support Risk Management Framework (RMF) compliance and continuous monitoring activities * Recommend ...
... risk management policies; review POA&Ms for technical clarity and sound judgment to ensure ... CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ • Knowledge of Incident ...
... risk management policies; review POA&Ms for technical clarity and sound judgment to ensure ... CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ • Knowledge of Incident ...
... Cyber PRIMES program by ensuring the security, compliance, and continuous monitoring of Department of Defense information systems. The role focuses on Risk Management Framework (RMF) activities ...
... Cyber PRIMES program by ensuring the security, compliance, and continuous monitoring of Department of Defense information systems. The role focuses on Risk Management Framework (RMF) activities ...
Provide expert guidance on cybersecurity directives and risk management policies; review POA&Ms for ... CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ * * Knowledge of Incident ...
Provide expert guidance on cybersecurity directives and risk management policies; review POA&Ms for ... CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ * * Knowledge of Incident ...
Provide expert guidance on cybersecurity directives and risk management policies; review POA&Ms for ... CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ * * Knowledge of Incident ...
Provide expert guidance on cybersecurity directives and risk management policies; review POA&Ms for ... CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ * * Knowledge of Incident ...
Provide expert guidance on cybersecurity directives and risk management policies; review POA&Ms for ... CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ * * Knowledge of Incident ...
Provide expert guidance on cybersecurity directives and risk management policies; review POA&Ms for ... CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ * * Knowledge of Incident ...
... Cyber PRIMES program by monitoring, analyzing, and responding to cybersecurity events across ... Support vulnerability management, threat detection, and continuous monitoring activities across ...
... Cyber PRIMES program by monitoring, analyzing, and responding to cybersecurity events across ... Support vulnerability management, threat detection, and continuous monitoring activities across ...
Application Security Engineer with Security Clearance
Seaside, CA · On-site
$62.75 - $84/hr
... Cyber PRIMES program by integrating security throughout the software development lifecycle and ... Support Risk Management Framework (RMF) activities and ensure application compliance with DoD ...
Application Security Engineer with Security Clearance
Seaside, CA · On-site
$62.75 - $84/hr
... Cyber PRIMES program by integrating security throughout the software development lifecycle and ... Support Risk Management Framework (RMF) activities and ensure application compliance with DoD ...
IT Manager
$105K - $129K/yr
Own compliance posture across IT systems, including cyber insurance requirements; proactively ... risk and operational impact. * Collaboration: Work closely with cross-functional teams to ...
IT Manager
$105K - $129K/yr
Own compliance posture across IT systems, including cyber insurance requirements; proactively ... risk and operational impact. * Collaboration: Work closely with cross-functional teams to ...
IT Manager
Monterey, CA · On-site
$105K - $129K/yr
Own compliance posture across IT systems, including cyber insurance requirements; proactively ... risk and operational impact. * Collaboration: Work closely with cross-functional teams to ...
Quick apply
IT Manager
Monterey, CA · On-site
$105K - $129K/yr
Own compliance posture across IT systems, including cyber insurance requirements; proactively ... risk and operational impact. * Collaboration: Work closely with cross-functional teams to ...
IT Manager
Monterey, CA · On-site
$105K - $129K/yr
Own compliance posture across IT systems, including cyber insurance requirements; proactively ... risk and operational impact. * Collaboration: Work closely with cross-functional teams to ...
IT Manager
Monterey, CA · On-site
$105K - $129K/yr
Own compliance posture across IT systems, including cyber insurance requirements; proactively ... risk and operational impact. * Collaboration: Work closely with cross-functional teams to ...
Cyber Risk Manager information
See Salinas, CA salary details
$55.3K - $66.9K
4% of jobs
$66.9K - $78.5K
6% of jobs
$78.5K - $90.1K
11% of jobs
$94.4K is the 25th percentile. Wages below this are outliers.
$90.1K - $101.6K
11% of jobs
The median wage is $110.8K / yr.
$101.6K - $113.2K
23% of jobs
$113.2K - $124.8K
13% of jobs
$132.4K is the 75th percentile. Wages above this are outliers.
$124.8K - $136.4K
12% of jobs
$136.4K - $147.9K
8% of jobs
$147.9K - $159.5K
6% of jobs
$159.5K - $171.1K
4% of jobs
$171.1K - $182.6K
2% of jobs
$55.3K
$119.9K
$182.6K
How much do cyber risk manager jobs pay per year?
How does a Cyber Risk Manager typically collaborate with other departments to strengthen an organization's cybersecurity posture?
What is the difference between Cyber Risk Manager vs Cybersecurity Analyst?
| Aspect | Cyber Risk Manager | Cybersecurity Analyst |
|---|---|---|
| Certifications | CRISC, CISSP, CISM | CompTIA Security+, CISSP, CEH |
| Work Environment | Risk assessment, policy development, strategic planning | Monitoring security systems, incident response, vulnerability testing |
| Employer & Industry Usage | Financial, healthcare, large enterprises | IT departments, security firms, corporate environments |
The Cyber Risk Manager focuses on identifying, assessing, and mitigating organizational cyber risks through strategic planning and policy development. In contrast, the Cybersecurity Analyst primarily monitors security systems, responds to incidents, and tests vulnerabilities. Both roles require certifications like CISSP, but their daily tasks and focus areas differ significantly, with the manager taking a broader, strategic approach and the analyst handling operational security tasks.
What are the key skills and qualifications needed to thrive as a Cyber Risk Manager, and why are they important?
Can you make $200,000 in cyber security?
Can you make $500,000 a year in cyber security?
What does a cyber risk manager do?
Is a CISO a stressful job?

$123K - $166K/yr
Other
Posted 3 days ago
Deloitte rating
8.1
Based on 91 frontline employees who took The Breakroom Quiz
58th of 150 rated financial services
Job description
Deloitte's Cyber Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.
Recruiting for this role ends on 12/31/2026
Job Summary
We are seeking an experienced professional to join our Cyber Defense and Resilience team, who will have extensive experience in Cyber Incident Response. This role involves supporting our client teams in defining, delivering and improving their Cyber Incident Response program to be able to support client's Readiness, Response, and Recovery from Cyber incidents or other crises and events. The candidate will also act as an integrator and champion internally and drive the definition, design, and deployment of solutions and services to advance Deloitte Cyber's Crisis & Incident Response and Technical Resilience offerings.
Responsibilities
Experience in leading the full lifecycle of Cyber incident response, manage and execute incident response engagements for clients, including investigations, containment, remediation, and recovery activities. Review deliverables and coordinate technical sessions to ensure high-quality service and Prepare incident reports, technical documentation, and client communications; maintain high standards for clarity and accuracy.
Create and enhance client's Crisis & Incident Response solutions based on industry standards such as ISO 27001, NIST, and CIS to advance Cyber incident readiness, response and recovery utilizing various related technologies. Identify opportunities for process optimization and continuous improvement in incident monitoring, detection, and response.
- Team Management: Strong leadership and team management skills. Supervise and mentor team members (US and US-India), fostering skills development, high performance, and collaborative delivery.
- Champion Cyber Crisis & Incident Response Solutions: Champion the development of Deloitte's Cyber Defense & Resilience market offerings around Crisis & Incident Response and Technical Resilience, ensuring alignment with industry best practices, leading technologies, and evolving client needs related to risk and threats.
- Drive Continuous Improvement: Utilize industry-leading practices and technology-based tools or methodologies to enhance the monitoring, delivery, and reliability of Deloitte Cyber's services provided to clients.
- Offer Thought Leadership and Training: Provide guidance on industry leading practices for development, while participating in the evaluation of new requirements. Contribute to the development of security awareness and training initiatives as necessary.
- Manage and Mentor Teams: Lead and mentor a US and US-India team, ensuring the effective delivery of technology risk management services and capabilities
Qualifications
Required:
- 10+ years of hands-on experience on Cyber Defense & Resilience solutions, including but not limited to cyber incident response, cyber resilience, and initiating / leading cyber transformation programs.
- BS/BA degree
- Limited visa sponsorship may be available
- Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.
#CyberCDR27
Qualifications:Deloitte's Cyber Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.
Recruiting for this role ends on 12/31/2026
Job Summary
We are seeking an experienced professional to join our Cyber Defense and Resilience team, who will have extensive experience in Cyber Incident Response. This role involves supporting our client teams in defining, delivering and improving their Cyber Incident Response program to be able to support client's Readiness, Response, and Recovery from Cyber incidents or other crises and events. The candidate will also act as an integrator and champion internally and drive the definition, design, and deployment of solutions and services to advance Deloitte Cyber's Crisis & Incident Response and Technical Resilience offerings.
Responsibilities
Experience in leading the full lifecycle of Cyber incident response, manage and execute incident response engagements for clients, including investigations, containment, remediation, and recovery activities. Review deliverables and coordinate technical sessions to ensure high-quality service and Prepare incident reports, technical documentation, and client communications; maintain high standards for clarity and accuracy.
Create and enhance client's Crisis & Incident Response solutions based on industry standards such as ISO 27001, NIST, and CIS to advance Cyber incident readiness, response and recovery utilizing various related technologies. Identify opportunities for process optimization and continuous improvement in incident monitoring, detection, and response.
- Team Management: Strong leadership and team management skills. Supervise and mentor team members (US and US-India), fostering skills development, high performance, and collaborative delivery.
- Champion Cyber Crisis & Incident Response Solutions: Champion the development of Deloitte's Cyber Defense & Resilience market offerings around Crisis & Incident Response and Technical Resilience, ensuring alignment with industry best practices, leading technologies, and evolving client needs related to risk and threats.
- Drive Continuous Improvement: Utilize industry-leading practices and technology-based tools or methodologies to enhance the monitoring, delivery, and reliability of Deloitte Cyber's services provided to clients.
- Offer Thought Leadership and Training: Provide guidance on industry leading practices for development, while participating in the evaluation of new requirements. Contribute to the development of security awareness and training initiatives as necessary.
- Manage and Mentor Teams: Lead and mentor a US and US-India team, ensuring the effective delivery of technology risk management services and capabilities
Qualifications
Required:
- 10+ years of hands-on experience on Cyber Defense & Resilience solutions, including but not limited to cyber incident response, cyber resilience, and initiating / leading cyber transformation programs.
- BS/BA degree
- Limited visa sponsorship may be available
- Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.
#CyberCDR27
Education:Bachelor's DegreeEmployment Type: