The Risk Assessment Lead serves as a key member of the Cybersecurity Risk Oversight team within the Second Line of Defense (2LoD). This role is accountable for independently assessing and challenging ...
The Risk Assessment Lead serves as a key member of the Cybersecurity Risk Oversight team within the Second Line of Defense (2LoD). This role is accountable for independently assessing and challenging ...
Cybersecurity Risk Analyst
Irving, TX · On-site
Why GMF Cybersecurity? Innovation isn't just a talking point at GM Financial, it's how we operate ... Perform third party risk assessments * Partner with Application Custodians to perform application ...
Cybersecurity Risk Analyst
Irving, TX · On-site
Why GMF Cybersecurity? Innovation isn't just a talking point at GM Financial, it's how we operate ... Perform third party risk assessments * Partner with Application Custodians to perform application ...
Perform cybersecurity risk assessments for all qualifying IT and OT environment changes. * Coordinate with the cybersecurity architecture senior specialist to validate risk assessment findings, and ...
Perform cybersecurity risk assessments for all qualifying IT and OT environment changes. * Coordinate with the cybersecurity architecture senior specialist to validate risk assessment findings, and ...
Perform cybersecurity risk assessments for all qualifying IT and OT environment changes. * Coordinate with the cybersecurity architecture senior specialist to validate risk assessment findings, and ...
Perform cybersecurity risk assessments for all qualifying IT and OT environment changes. * Coordinate with the cybersecurity architecture senior specialist to validate risk assessment findings, and ...
Perform cybersecurity risk assessments for all qualifying IT and OT environment changes. * Coordinate with the cybersecurity architecture senior specialist to validate risk assessment findings, and ...
New
Perform cybersecurity risk assessments for all qualifying IT and OT environment changes. * Coordinate with the cybersecurity architecture senior specialist to validate risk assessment findings, and ...
New
Perform cybersecurity risk assessments for all qualifying IT and OT environment changes. * Coordinate with the cybersecurity architecture senior specialist to validate risk assessment findings, and ...
Perform cybersecurity risk assessments for all qualifying IT and OT environment changes. * Coordinate with the cybersecurity architecture senior specialist to validate risk assessment findings, and ...
Cybersecurity Risk Analyst
Irving, TX · Hybrid
Cybersecurity Governance, Risk Management, Legal Regulations, IT or Security Audit, IT or Security Compliance preferred * 3+ years of experience performing risk assessments and/or cybersecurity ...
Cybersecurity Risk Analyst
Irving, TX · Hybrid
Cybersecurity Governance, Risk Management, Legal Regulations, IT or Security Audit, IT or Security Compliance preferred * 3+ years of experience performing risk assessments and/or cybersecurity ...
Identify, assess, and manage cybersecurity risks across IT and OT environments, maintaining a clear and actionable risk register. * Develop, implement, and maintain cybersecurity policies, standards ...
Identify, assess, and manage cybersecurity risks across IT and OT environments, maintaining a clear and actionable risk register. * Develop, implement, and maintain cybersecurity policies, standards ...
Identify, assess, and manage cybersecurity risks across IT and OT environments, maintaining a clear and actionable risk register. * Develop, implement, and maintain cybersecurity policies, standards ...
Identify, assess, and manage cybersecurity risks across IT and OT environments, maintaining a clear and actionable risk register. * Develop, implement, and maintain cybersecurity policies, standards ...
Cyber Security Risk Governance Senior Associate
Coppell, TX · Hybrid
$93K - $119K/yr
Support Cyber Risk Institute (CRI) maturity and controls assessments through evidence gathering ... Partner across the Cyber Security Risk Office and first-line teams to support integrated governance ...
Cyber Security Risk Governance Senior Associate
Coppell, TX · Hybrid
$93K - $119K/yr
Support Cyber Risk Institute (CRI) maturity and controls assessments through evidence gathering ... Partner across the Cyber Security Risk Office and first-line teams to support integrated governance ...
Cyber Security Risk Governance Senior Associate
Coppell, TX · On-site
$93K - $119K/yr
Support Cyber Risk Institute (CRI) maturity and controls assessments through evidence gathering ... Partner across the Cyber Security Risk Office and first-line teams to support integrated governance ...
Cyber Security Risk Governance Senior Associate
Coppell, TX · On-site
$93K - $119K/yr
Support Cyber Risk Institute (CRI) maturity and controls assessments through evidence gathering ... Partner across the Cyber Security Risk Office and first-line teams to support integrated governance ...
Contribute to risk assessments, exception reviews, and documentation in collaboration with Cyber ... Cybersecurity, risk management, or vulnerability management * Strong ability to analyze complex ...
Contribute to risk assessments, exception reviews, and documentation in collaboration with Cyber ... Cybersecurity, risk management, or vulnerability management * Strong ability to analyze complex ...
Cyber Security Risk & Compliance Specialist
Irving, TX · On-site
$119K - $145K/yr
Cyber Security Risk & Compliance Specialist About Us EF Johnson Technologies, Inc. is a subsidiary ... Conduct regular assessments to verify proper operation * Identify security controls tailored to ...
Quick apply
Cyber Security Risk & Compliance Specialist
Irving, TX · On-site
$119K - $145K/yr
Cyber Security Risk & Compliance Specialist About Us EF Johnson Technologies, Inc. is a subsidiary ... Conduct regular assessments to verify proper operation * Identify security controls tailored to ...
Cybersecurity Engineer
Dallas, TX · On-site
Cybersecurity Risk Management * Perform cybersecurity risk assessments for medical device systems using structured methodologies (Threat Modeling, STRIDE, DREAD, Attack Trees, SBOM analysis)
Quick apply
Cybersecurity Engineer
Dallas, TX · On-site
Cybersecurity Risk Management * Perform cybersecurity risk assessments for medical device systems using structured methodologies (Threat Modeling, STRIDE, DREAD, Attack Trees, SBOM analysis)
Overseas Contractor
Dallas, TX · On-site
Focus Risk Governance Vulnerability Management Policies and Standards Engineer GRC Assessments ANSP ... industry SKILLS Cybersecurity Risk Governance Expertise Requires 35 years of progressive ...
Overseas Contractor
Dallas, TX · On-site
Focus Risk Governance Vulnerability Management Policies and Standards Engineer GRC Assessments ANSP ... industry SKILLS Cybersecurity Risk Governance Expertise Requires 35 years of progressive ...
Senior Program Manager - Cybersecurity Risk Management
Spring, TX · Hybrid
$130K - $205K/yr
Partners with business operations and third-party partners to assess compliance to cybersecurity standards and drives cybersecurity risk management process improvements * Leads risk remediation ...
Senior Program Manager - Cybersecurity Risk Management
Spring, TX · Hybrid
$130K - $205K/yr
Partners with business operations and third-party partners to assess compliance to cybersecurity standards and drives cybersecurity risk management process improvements * Leads risk remediation ...
Senior Program Manager - Cybersecurity Risk Management
Spring, TX · On-site
$130K - $205K/yr
Partners with business operations and third-party partners to assess compliance to cybersecurity standards and drives cybersecurity risk management process improvements * Leads risk remediation ...
Senior Program Manager - Cybersecurity Risk Management
Spring, TX · On-site
$130K - $205K/yr
Partners with business operations and third-party partners to assess compliance to cybersecurity standards and drives cybersecurity risk management process improvements * Leads risk remediation ...
Managing Director, Technology Risk Management
Southlake, TX · On-site
$225K - $375K/yr
This leader is accountable for the design, governance, and independent oversight of cybersecurity and data risk policies, frameworks, measurement, reporting, and assessment processes. The role ...
Managing Director, Technology Risk Management
Southlake, TX · On-site
$225K - $375K/yr
This leader is accountable for the design, governance, and independent oversight of cybersecurity and data risk policies, frameworks, measurement, reporting, and assessment processes. The role ...
This leader is accountable for the design, governance, and independent oversight of cybersecurity and data risk policies, frameworks, measurement, reporting, and assessment processes. The role ...
This leader is accountable for the design, governance, and independent oversight of cybersecurity and data risk policies, frameworks, measurement, reporting, and assessment processes. The role ...
As a Cybersecurity Operational Lead in Compliance, Conduct, and Operational Risk team, you will ... You lead risk assessments, significant event reviews, and control monitoring across security ...
As a Cybersecurity Operational Lead in Compliance, Conduct, and Operational Risk team, you will ... You lead risk assessments, significant event reviews, and control monitoring across security ...
Cyber Security Risk Assessment information
See Texas salary details
$53.1K - $64K
1% of jobs
$64K - $75K
4% of jobs
$75K - $85.9K
5% of jobs
$85.9K - $96.8K
9% of jobs
$102.8K is the 25th percentile. Wages below this are outliers.
$96.8K - $107.7K
11% of jobs
$107.7K - $118.7K
10% of jobs
The median wage is $122.9K / yr.
$118.7K - $129.6K
28% of jobs
$135.9K is the 75th percentile. Wages above this are outliers.
$129.6K - $140.5K
14% of jobs
$140.5K - $151.4K
11% of jobs
$151.4K - $162.4K
4% of jobs
$162.4K - $173.3K
4% of jobs
$53.1K
$123.9K
$173.3K
How much do cyber security risk assessment jobs pay per year?
Can you make $500,000 a year in cyber security?
What are the key skills and qualifications needed to thrive in Cyber Security Risk Assessment, and why are they important?
What is the role of risk assessment in cyber security?
What is the difference between Cyber Security Risk Assessment vs Cyber Security Analyst?
| Aspect | Cyber Security Risk Assessment | Cyber Security Analyst |
|---|---|---|
| Primary Focus | Identifying and evaluating security risks and vulnerabilities | Monitoring, analyzing, and responding to security threats |
| Certifications | CompTIA Security+, CISSP, CISA | CompTIA Security+, CISSP, CEH |
| Work Environment | Risk assessment teams, consulting firms, security departments | Security operations centers, IT departments, incident response teams |
While both roles require similar certifications and work within cybersecurity, a Cyber Security Risk Assessment focuses on evaluating potential vulnerabilities and risks to an organization’s assets. In contrast, a Cyber Security Analyst actively monitors and responds to security threats, ensuring ongoing protection. Understanding these differences helps organizations assign the right responsibilities to each role.
What are some common challenges faced by professionals conducting cyber security risk assessments?
Can I make $200,000 a year in cyber security?
How much does a cybersecurity risk analyst make?
What is a cyber security risk assessment?
- Senior Information Security Compliance Analyst
- Fisma Compliance
- Remote Grc Analyst
- Urgently Hiring Information Security Compliance Analyst
- Information Security Compliance Analyst
- Full Time Vulnerability Analyst
- Grc Analyst
- Freelance Cyber Security Purple Team
- Risk Management Framework
- Manager Cyber Crime Analyst

Full-time
Medical, Dental, Vision, Life, Retirement, PTO
Posted 21 days ago
U.S. Bank rating
8.2
Based on 352 frontline employees who took The Breakroom Quiz
39th of 144 rated banks
Job description
At U.S. Bank, we're on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at-all from Day One.
Job DescriptionThe Risk Assessment Lead serves as a key member of the Cybersecurity Risk Oversight team within the Second Line of Defense (2LoD). This role is accountable for independently assessing and challenging First Line Technology and Information Security practices to ensure effective risk management and regulatory compliance.
This position requires a senior professional who can operate with a high degree of autonomy, prioritize work based on material risk, and influence outcomes through strong technical expertise and stakeholder engagement.
Key Responsibilities:
Risk Oversight & Independent Challenge
Provide independent oversight and credible challenge across Technology and Information Security domains including governance, controls, risk assessments, metrics, and issue management.
Perform risk-based assessments to identify control gaps, thematic risks, and emerging threats.
Develop independent risk opinions supported by analysis, evidence, and professional judgment.
Evaluate alignment with applicable laws, regulations, and industry frameworks (e.g., NIST, FFIEC, PCI).
Risk Management & Framework Execution
Partner with business and risk stakeholders to support the implementation and maintenance of effective risk management frameworks.
Identify gaps in processes, systems, controls and drive solutions to minimize risk exposure.
Ensure risks are actively identified, monitored, escalated, and remediated as appropriate.
Influence policies and procedures to strengthen the control environment and reduce regulatory risk.
Stakeholder Engagement & Communication
Build and maintain strong relationships with First Line stakeholders while maintaining independence and objectivity.
Provide clear, concise, and executive-ready communication of risk posture, key issues, and trends.
Engage senior leadership to support risk-informed decision making.
Translate complex technical risks into actionable business insights.
Leadership & Organizational Impact
Lead, coach, or mentor risk and security professionals; support talent development and team capability.
Contribute to strategic initiatives impacting enterprise technology, security and risk programs.
Act as a subject matter expert on technology and cybersecurity risk and regulatory expectations.
Promote a strong risk culture emphasizing accountability, transparency, and continuous improvement.
Basic Qualifications
- Bachelor's degree, or equivalent work experience
- Typically more than 10 years of applicable experience
Preferred Skills/Experience
Advanced knowledge of information security domains (e.g., identity and access management, application security, cloud security, vulnerability management, incident response)
Strong understanding of regulatory requirements and industry standards (e.g., NIST, FFIEC, PCI, and risk management frameworks)
Experience performing risk assessments, control evaluations, and oversight activities
Advanced understanding of business operations, systems, and associated risks and controls
Ability to operate independently with strong judgment and professional skepticism
Strong analytical, problem-solving, and decision-making skills
Excellent written and verbal communication skills, including executive-level messaging
Proven ability to influence stakeholders and challenge effectively without direct authority
Strong leadership and management skills across people, processes, and projects
Experience operating within Second Line of Defense, audit, or regulatory environments
Relevant certifications (e.g., CISSP, CISA, CRISC, CISM) preferred
Advanced knowledge of regulatory environment and trends in financial services
This role requires working from a U.S. Bank location three (3) or more days per week.
If there's anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to ourdisability accommodations for applicants.
Benefits:
Our approach to benefits and total rewards considers our team members' whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:
Healthcare (medical, dental, vision)
Basic term and optional term life insurance
Short-term and long-term disability
Pregnancy disability and parental leave
401(k) and employer-funded retirement plan
Paid vacation (from two to five weeks depending on salary grade and tenure)
Up to 11 paid holiday opportunities
Adoption assistance
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law
Review our full benefits available by employment status here.
U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.
E-Verify
U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. Learn more about theE-Verify program.
The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $133,365.00 - $156,900.00U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.
Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.
Posting may be closed earlier due to high volume of applicants.
What U.S. Bank employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About U.S. Bank
Sourced by ZipRecruiter
U.S. Bank is a reputable and established financial institution that plays a significant role in the banking sector. With a history spanning over 150 years, U.S. Bank has built a strong foundation of trust and reliability. As a comprehensive bank, they offer a wide array of financial products and services to cater to the diverse needs of their customers, including individuals, businesses, and communities. Customer satisfaction is of utmost importance to U.S. Bank. They prioritize delivering exceptional service and fostering long-term relationships with their clients. Through their extensive network of branches and advanced digital banking platforms, U.S. Bank ensures convenient access to their services, empowering customers to manage their finances efficiently and securely.
Industry
Banking and credit intermediation
Company size
10,000+ Employees
Headquarters location
Minneapolis, MN, US
Year founded
1863