ZipRecruiter

Log In

1

Cyber Security Risk Analyst Jobs in Saint Paul, MN

NextEra Energy

Cybersecurity Analyst

Saint Paul, MN · On-site

Risk Documentation: Document identified risks, control gaps, findings, compensating controls, and ... AI-Assisted Analysis: Use AI assistants and related tools to improve cybersecurity research, risk ...

Medtronic

Senior Cybersecurity Analyst

Moundsview, MN · On-site

$106K - $136K/yr

This role is responsible for supporting cybersecurity compliance, risk management, vulnerability ... The Senior Cybersecurity Analyst works across technical and business teams to maintain Authority to ...

Medtronic

Senior Cybersecurity Analyst

Moundsview, MN

$106K - $136K/yr

This role is responsible for supporting cybersecurity compliance, risk management, vulnerability ... The Senior Cybersecurity Analyst works across technical and business teams to maintain Authority to ...

Medtronic

Senior Cybersecurity Analyst

Moundsview, MN

$106K - $136K/yr

This role is responsible for supporting cybersecurity compliance, risk management, vulnerability ... The Senior Cybersecurity Analyst works across technical and business teams to maintain Authority to ...

next page

Showing results 1-20

All JobsCyber Security Risk Analyst JobsCyber Security Risk Analyst Jobs in Saint Paul, MN

Cyber Security Risk Analyst information

See Saint Paul, MN salary details

$43.5K

$100.5K

$151.7K

How much do cyber security risk analyst jobs pay per year?

As of Aug 31, 2026, the average yearly pay for cyber security risk analyst in Saint Paul, MN is $100,531.00, according to ZipRecruiter salary data. Most workers in this role earn between $80,400.00 and $116,800.00 per year, depending on experience, location, and employer.

What is a cyber security risk analyst?

A Cyber Security Risk Analyst is responsible for identifying, assessing, and mitigating cybersecurity risks within an organization. They analyze potential threats, evaluate security controls, and recommend improvements to protect sensitive data and systems. Their role often involves conducting risk assessments, ensuring compliance with industry regulations, and collaborating with IT and security teams to enhance defenses. They also monitor emerging threats and provide strategic insights to minimize vulnerabilities. Ultimately, they help organizations maintain a strong security posture against cyber threats.

What are some typical challenges faced by cyber security risk analysts on the job?

Cyber Security Risk Analysts commonly face the challenge of keeping up with constantly evolving threats and technology landscapes. They must balance the need for robust security with business objectives, often requiring nuanced decision-making and collaboration across departments. Analysts may also encounter difficulties in communicating complex technical risks to non-technical stakeholders. Successfully navigating these challenges is key to maintaining organizational security and fostering a culture of risk awareness.

What are the key skills and qualifications needed to thrive in the cyber security risk analyst position, and why are they important?

A Cyber Security Risk Analyst requires a solid understanding of information security principles, risk assessment methodologies, and a relevant degree such as computer science or cybersecurity. Familiarity with tools like risk management frameworks (NIST, ISO 27001), vulnerability scanners, and certifications such as CISSP, CISM, or CRISC is common in this role. Strong analytical thinking, attention to detail, effective communication, and problem-solving skills are vital soft skills. These competencies enable analysts to accurately identify, assess, and communicate cyber risks, protecting organizations from evolving threats.

How much does a cyber security risk analyst make?

The average salary for a cyber security risk analyst in the United States ranges from $70,000 to $120,000 annually, depending on experience, certifications, and location. Entry-level positions typically start around $60,000, while experienced analysts with certifications like CISSP or CISA can earn over $130,000. The role often requires knowledge of risk assessment tools and security frameworks.

What are popular job titles related to Cyber Security Risk Analyst jobs in Saint Paul, MN?

For Cyber Security Risk Analyst jobs in Saint Paul, MN, the most frequently searched job titles are:

What job categories do people searching Cyber Security Risk Analyst jobs in Saint Paul, MN look for?

The top searched job categories for Cyber Security Risk Analyst jobs in Saint Paul, MN are:

Cyber Security Risk Analyst jobs near you
Infographic showing various Cyber Security Risk Analyst job openings in Saint Paul, MN as of August 2026, with employment types broken down into 86% Full Time, 12% Part Time, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $100,531 per year, or $48.3 per hour.

Cybersecurity Analyst

Saint Paul, MN • On-site

NextEra Energy

8.4

Company rating: 8.4 out of 10

Based on 55 frontline employees who took The Breakroom Quiz

19th of 53 rated energy and utility

Great coworkers

People enjoy working here

Good employer

Learn more about NextEra Energyexternal

Full-time

Posted 7 days ago

Job description

Requisition ID:  97057 

NextEra Analytics offers energy consulting services using industry-leading scientific analysis for planning, siting, forecasting and optimizing all forms of energy projects. Our optimization and analytics platforms integrate open-source technologies to leverage massive, diverse sets of utility operating data. This enables rapid development of operational solutions. Applying expertise in advanced mathematics, data and physical sciences, we solve some of the hardest problems facing the energy industry.
 

Position Specific Description

We are seeking a cybersecurity professional to support the continued development and execution of NEA's cybersecurity risk management program. This role will coordinate security assessments, third-party risk reviews, application security evaluations, penetration testing activities, and remediation tracking across the organization.

The successful candidate will work closely with engineering teams, application owners, vendors, and business stakeholders to identify cybersecurity risks, document findings, and drive issues through resolution. This individual will also help standardize cybersecurity processes, reporting, and governance while using AI-enabled tools to improve analysis, efficiency, and decision-making.

Key Responsibilities & Expectations

1. Cybersecurity Risk Management

  • Security Assessments: Support cybersecurity assessments and risk reviews across applications, platforms, vendors, and technology solutions.
  • Risk Documentation: Document identified risks, control gaps, findings, compensating controls, and formal risk decisions.
  • Remediation Management: Track cybersecurity findings and remediation activities through validation and closure. Support risk acceptance and exception handling, including documenting formal security decisions when remediation is deferred.

2. Third-Party and Application Security

  • Third-Party Risk Assessments: Support security assessments for vendors, SaaS platforms, development tools, and AI-enabled solutions.
  • Application Security Reviews: Coordinate security reviews for applications and technology tools, including evidence collection, documentation, findings management, and stakeholder follow-up.
  • Stakeholder Coordination: Partner with application owners, engineering teams, vendors, and business stakeholders to obtain required information and resolve identified concerns.

3. Security Testing and Resiliency

  • Penetration Testing Coordination: Support penetration testing activities, including scheduling, scope coordination, results management, remediation tracking, and reporting.
  • Critical Application Resiliency: Assist with resiliency assessments for critical applications by organizing documentation, evaluating risk information, and tracking required actions.
  • Issue Resolution: Work with technical and business teams to identify appropriate remediation plans and ensure cybersecurity risks are addressed in a timely manner.
  • Audit Prep: Assist with audit and evidence requests by organizing support materials, tracking responses, and confirming completeness.

4. Governance, Reporting, and Process Improvement

  • Risk and Assessment Inventories: Maintain accurate inventories of assessed applications, vendors, findings, risk decisions, and remediation status.
  • Standardized Processes: Develop and maintain consistent assessment templates, workflows, procedures, reports, and dashboards.
  • Program Reporting: Provide clear and actionable reporting on cybersecurity risks, assessment activity, remediation progress, and program performance.  Analyze recurring findings, remediation patterns, and program trends to help prioritize work and improve the overall cybersecurity program.
  • Continuous Improvement: Identify opportunities to improve the consistency, scalability, and effectiveness of cybersecurity review processes.

5. AI-Enabled Cybersecurity Productivity

  • AI-Assisted Analysis: Use AI assistants and related tools to improve cybersecurity research, risk analysis, documentation, and decision support.
  • Workflow Efficiency: Apply AI-enabled capabilities to streamline evidence review, reporting, remediation tracking, and other repeatable cybersecurity activities.
  • Responsible Adoption: Validate AI-generated outputs, protect sensitive information, and ensure responsible use of AI tools in cybersecurity work.

6. Collaboration and Ownership

  • Cross-Functional Partnership: Collaborate with engineering, application owners, cybersecurity teams, vendors, and business stakeholders to identify security gaps and support remediation.
  • Clear Communication: Translate cybersecurity risks and technical findings into clear, business-relevant language.
  • Ownership and Accountability: Manage assigned assessments and findings from initiation through completion while communicating risks, dependencies, and delays proactively.  Apply working knowledge of application security and DevSecOps practices, including vulnerability management concepts and secure delivery workflows.

Required Qualifications

  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or equivalent practical experience.
  • Experience supporting cybersecurity risk assessments, security compliance activities, application security reviews, or third-party risk management.
  • Familiarity with cybersecurity controls, risk management concepts, vulnerability management, and remediation practices.
  • Experience coordinating work across technical teams, business stakeholders, and external vendors.
  • Strong organizational skills with the ability to manage documentation, findings, deadlines, and multiple concurrent assessments.
  • Strong written and verbal communication skills, including the ability to explain cybersecurity risks to both technical and nontechnical audiences.
  • Experience using reporting, workflow, ticketing, governance, risk, and compliance tools.
  • Familiarity with GRC, workflow, or case management tools used for risk tracking and remediation.
  • Experience with vulnerability management, security review coordination, or penetration test support.
  • Basic familiarity with application security and DevSecOps concepts such as SAST, SCA, DAST, CI/CD, and secure coding.
  • Ability to use AI assistants and related technologies responsibly to improve analysis, documentation, and workflow efficiency.
  • Ability to validate AI-assisted outputs and handle sensitive information appropriately.

What NextEra Energy employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply