ZipRecruiter

Log In

1

Cyber Security Risk Analyst Jobs in California (NOW HIRING)

Analygence

Cybersecurity Assessment Lead

Coronado, CA · On-site

$117K - $159K/yr

Analyze testing results and provide cybersecurity risk assessments to the Government SCA and Authorizing Official. * RMF Package Development and Reporting * Oversee preparation and delivery of RMF ...

Analygence

Cybersecurity Assessment Lead

Coronado, CA · On-site

$117K - $159K/yr

This position leads independent security control validation activities, ensures RMF packages are complete and compliant, and provides cybersecurity risk analysis to the Government Security Control ...

Apogee Global RMS

Risk Analyst

San Jose, CA · On-site +1

Three to seven years of professional experience in risk analysis, intelligence analysis, cybersecurity research, threat intelligence, geopolitical analysis, or a directly related research function.

Apogee Global RMS

Risk Analyst

San Jose, CA · Remote

Three to seven years of professional experience in risk analysis, intelligence analysis, cybersecurity research, threat intelligence, geopolitical analysis, or a directly related research function.

next page

Showing results 1-20

All JobsCyber Security Risk Analyst JobsCyber Security Risk Analyst Jobs in California

Cyber Security Risk Analyst information

See California salary details

$42.4K

$98.1K

$148K

How much do cyber security risk analyst jobs pay per year?

As of Jun 10, 2026, the average yearly pay for cyber security risk analyst in California is $98,098.00, according to ZipRecruiter salary data. Most workers in this role earn between $78,500.00 and $114,000.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive in the Cyber Security Risk Analyst position, and why are they important?

A Cyber Security Risk Analyst requires a solid understanding of information security principles, risk assessment methodologies, and a relevant degree such as computer science or cybersecurity. Familiarity with tools like risk management frameworks (NIST, ISO 27001), vulnerability scanners, and certifications such as CISSP, CISM, or CRISC is common in this role. Strong analytical thinking, attention to detail, effective communication, and problem-solving skills are vital soft skills. These competencies enable analysts to accurately identify, assess, and communicate cyber risks, protecting organizations from evolving threats.

What is a Cyber Security Risk Analyst job?

A Cyber Security Risk Analyst is responsible for identifying, assessing, and mitigating cybersecurity risks within an organization. They analyze potential threats, evaluate security controls, and recommend improvements to protect sensitive data and systems. Their role often involves conducting risk assessments, ensuring compliance with industry regulations, and collaborating with IT and security teams to enhance defenses. They also monitor emerging threats and provide strategic insights to minimize vulnerabilities. Ultimately, they help organizations maintain a strong security posture against cyber threats.

What are some typical challenges faced by Cyber Security Risk Analysts on the job?

Cyber Security Risk Analysts commonly face the challenge of keeping up with constantly evolving threats and technology landscapes. They must balance the need for robust security with business objectives, often requiring nuanced decision-making and collaboration across departments. Analysts may also encounter difficulties in communicating complex technical risks to non-technical stakeholders. Successfully navigating these challenges is key to maintaining organizational security and fostering a culture of risk awareness.

What are the most commonly searched types of Cyber Security Risk Analyst jobs in California? The most popular types of Cyber Security Risk Analyst jobs in California are:
What are popular job titles related to Cyber Security Risk Analyst jobs in California? For Cyber Security Risk Analyst jobs in California, the most frequently searched job titles are:
What job categories do people searching Cyber Security Risk Analyst jobs in California look for? The top searched job categories for Cyber Security Risk Analyst jobs in California are:
What cities in California are hiring for Cyber Security Risk Analyst jobs? Cities in California with the most Cyber Security Risk Analyst job openings:
Cyber Security Risk Analyst jobs near you
Infographic showing various Cyber Security Risk Analyst job openings in California as of June 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $98,098 per year, or $47.2 per hour.

CISSP-Cyber Security Analyst

TechVirtue LLC

Rancho Cucamonga, CA • Hybrid

Other

Posted yesterday

Job description

Location : Rancho Cucamonga, California, United States (Hybrid)

Role: Cybersecurity Risk Analyst

The Cybersecurity Risk Analyst is a cybersecurity program and control assessor and advisor in governance, risk, and compliance functions. This position is responsible for the assessing and advancing of IEHP’s cybersecurity posture and capability to safeguard its digital assets.

The purpose of this position is to provide highly skilled technical and cyber expertise for development and implementation of the enterprise information security program. Responsibilities require leadership and project management experience, as well as expertise to ensure effective system-wide security capability analysis; best practices and assurance testing; risk assessment; awareness and education; and development of security control portfolio.

 Duties and Responsibilities

1.       Lead the system-wide cybersecurity compliance program, ensuring IT activities, processes, and procedures meet regulatory and industrial requirements.

2.       Develop and implement effective policies and practices to safeguard IEHP digital assets and prevent unauthorized access.

3.       Recommend process improvement and technical directions in matters relating to program maturity, incident investigation, threat management, and control assessment.

4.       Organize the collection of data from required security artifacts and questionnaires for industry framework and other related industrial and cybersecurity standards and mapping this to the company control portfolio.

5.       Build and maintain cybersecurity metrics for all levels of management focused on trending and tracking reports to demonstrate compliance and improve resilience.

6.       Analyze risk associated with technology stack and supply chain and work with business leaders to proactively manage exceptions.

7.       Develop program strategies to improve cyber hygiene and address awareness and training for all stakeholders.

8.       Perform security review in technology products and solutions (including security tools and systems), identify gaps in control design and operation, and develop remediation plan.

9.       Provide advice and input for IT disaster recovery, contingency, and continuity of operations plans.

10.   Define policy and standards for data protection and recovery.

11.   Perform access & privilege review for both machine and human accounts.

12.   Properly document all systems security implementation, operations, and maintenance activities and update as necessary.

13.   Provide input to risk management process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).

 Experience Requirements

1.       Five (5) years in cybersecurity with focus on governance, compliance and risk management.

2.       Bachelor’s degree in Information Systems Security or in a computer related field or similar technical field from an accredited institution required.

3.       Certified Information Systems Security Professional (CISSP) or other industrial and vendor security certifications preferred.

 Knowledge

Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.

Skills

Skilled in Cybersecurity, privacy principles and organizational requirements.

Apply