ZipRecruiter

Log In

1

Cyber Security Risk Management Jobs in California

Medium

Cybersecurity Director

San Francisco, CA · On-site

$230 - $245/hr

About the Role The Cybersecurity Director is responsible for providing strategic leadership across ... Manage a comprehensive Governance, Risk, and Compliance program in support of corporate audits ...

Doist

Cybersecurity Director

San Francisco, CA · On-site

$230 - $245/hr

About the Role The Cybersecurity Director is responsible for providing strategic leadership across ... Manage a comprehensive Governance, Risk, and Compliance program in support of corporate audits ...

Business Wire

Cybersecurity Director

San Francisco, CA · On-site

About the Role The Cybersecurity Director is responsible for providing strategic leadership across ... Manage a comprehensive Governance, Risk, and Compliance program in support of corporate audits ...

KAI Partners, Inc.

Cybersecurity Consultant

Roseville, CA · On-site

$118K - $133K/yr

This role brings cybersecurity, risk management, and regulatory expertise to consulting engagements and contributes practical, business-aligned recommendations that support risk reduction, compliance ...

KAI Partners, Inc.

Cybersecurity Consultant

Roseville, CA · On-site

$118K - $133K/yr

This role brings cybersecurity, risk management, and regulatory expertise to consulting engagements and contributes practical, business-aligned recommendations that support risk reduction, compliance ...

KAI Partners

Cybersecurity Consultant

Roseville, CA · On-site

$118K - $133K/yr

This role brings cybersecurity, risk management, and regulatory expertise to consulting engagements and contributes practical, business-aligned recommendations that support risk reduction, compliance ...

Accelint

Sr Cyber Engineer (ISSE)

San Diego, CA · On-site

We are seeking an Information Systems Security Engineer (ISSE) / Cybersecurity Engineer to support Risk Management Framework (RMF), cybersecurity engineering, Assessment & Authorization (A&A ...

Innoflight

Sr. IT Cyber Security Specialist

San Diego, CA · On-site

$135K - $160K/yr

Executes all phases of the Risk Management Framework (RMF), including system categorization, security control implementation, assessment, authorization, and continuous monitoring to maintain ...

previous pagenext page

Showing results 21-40

All JobsCyber Security Risk Management JobsCyber Security Risk Management Jobs in California

Cyber Security Risk Management information

See California salary details

$56.3K

$131.2K

$183.6K

How much do cyber security risk management jobs pay per year?

As of Aug 16, 2026, the average yearly pay for cyber security risk management in California is $131,221.00, according to ZipRecruiter salary data. Most workers in this role earn between $109,500.00 and $148,000.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive in cyber security risk management?

To thrive in Cyber Security Risk Management, you need a solid understanding of risk assessment methodologies, information security frameworks (such as ISO 27001 or NIST), and often a relevant degree or certification like CISSP or CISM. Familiarity with security tools, vulnerability assessment platforms, and risk management software is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying threats and conveying risk to stakeholders. These skills ensure that organizations can proactively manage and mitigate cyber threats, safeguarding critical assets and maintaining compliance.

What is cyber security risk management?

Cyber security risk management is the process of identifying, assessing, and prioritizing risks to an organization's information systems and data. It involves evaluating potential threats and vulnerabilities, determining the likelihood and impact of these risks, and implementing measures to mitigate or manage them. Effective risk management helps organizations protect sensitive data, ensure regulatory compliance, and minimize the impact of cyber attacks. This process is ongoing and adapts to new threats and changes in technology.

What is the difference between Cyber Security Risk Management vs Cyber Security Analyst?

AspectCyber Security Risk ManagementCyber Security Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CEH, CISSP (preferred)
Work EnvironmentPolicy development, risk assessment, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageOrganizations focusing on risk mitigation and complianceOrganizations implementing and maintaining security measures

Cyber Security Risk Management professionals focus on identifying, assessing, and mitigating security risks at an organizational level, often involved in policy and strategy. Cyber Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require similar certifications and work within the same industry, their core responsibilities differ: risk managers develop strategies, whereas analysts execute security measures and respond to threats.

What are some typical challenges faced in cyber security risk management, and how can they be addressed?

Professionals in Cyber Security Risk Management often encounter challenges such as staying updated with rapidly evolving threats, balancing security needs with business objectives, and ensuring compliance with various regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and the implementation of robust risk assessment frameworks. Collaboration with IT, legal, and business teams is essential to develop practical security policies that protect assets without hindering operations.

What are popular job titles related to Cyber Security Risk Management jobs in California?

For Cyber Security Risk Management jobs in California, the most frequently searched job titles are:

What job categories do people searching Cyber Security Risk Management jobs in California look for?

The top searched job categories for Cyber Security Risk Management jobs in California are:

What cities in California are hiring for Cyber Security Risk Management jobs?

Cities in California with the most Cyber Security Risk Management job openings:

Cyber Security Risk Management jobs near you
Infographic showing various Cyber Security Risk Management job openings in California as of August 2026, with employment types broken down into 1% As Needed, 81% Full Time, 14% Part Time, 2% Temporary, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $131,221 per year, or $63.1 per hour.

Cybersecurity Director

Business Wire

San Francisco, CA

Full-time

Posted 9 days ago

Job description

Business Wire, a Berkshire Hathaway company, is the global market leader in press release distribution and regulatory disclosure. We are on a mission to redefine how organizations connect with their audiences - and that’s just the beginning!

Organizations, large and small, depend on us to accurately publicize market-moving news and multimedia, and generate social engagements that develop interactions with their target audiences.

About the Role

The Cybersecurity Director is responsible for providing strategic leadership across Business Wire’s cybersecurity function, providing strategy, overseeing security architecture and infrastructure, guiding cybersecurity-related risk decisions across the organization, and advancing and managing a comprehensive Governance, Risk, and Compliance (GRC) program.

This role works collaboratively with all areas of the business to ensure that we maintain a robust and highly effective Information Security program for our existing solutions while also supporting the buildout of new client solutions hosted in our data centers and the cloud. This role provides oversight of our external cyber defense partner and drives efforts in cloud security, application security, identity and access strategies, Zero Trust, vulnerability management, email security, data protection, privacy requirements, and emerging technology risks—including AI.

This role is additionally responsible for establishing a robust security governance framework, ensuring compliance with internal and external audit requirements, fostering a security-first culture across the organization, and collaborating with cross-functional teams to integrate risk management practices into all business operations.

What You'll Do

  • Develop and maintain cybersecurity and GRC strategy and long-term roadmap, with the goal of enhancing overall strategy in alignment with business objectives.
  • Make continuous improvements to our security strategies to protect critical assets and data.
  • Provide strategic decision-making and problem-solving to navigate complex security and regulatory landscapes.
  • Manage a comprehensive Governance, Risk, and Compliance program in support of corporate audits, client assessments, and regulatory standards such as PCI DSS, SOC 2, and ISO 27001; ensure that our company meets all internal and external audit requirements.
  • Conduct regular risk assessments and periodic penetration testing and vulnerability assessments to identify and mitigate potential threats to the organization's infrastructure, applications, and data. 
  • Manage the timely creation and dissemination of security-related communications including security awareness and training announcements, security compliance policies and processes, security alerts, and event messaging.
  • Provide oversight in maintaining a successful collaborative relationship with our external cyber defense partner, including evaluation of service delivery performance and in alignment with BW’s cybersecurity priorities.
  • Provide strategic leadership during cybersecurity incidents, coordinating with IT, Legal, HR, Privacy, Communications, and other stakeholders, and act as executive-level point-of-contact.
  • Offer senior-level guidance in developing and improving cybersecurity governance programs, policies, standards, and secure architecture guidelines.
  • Oversee enterprise cybersecurity risk assessments and ensure corrective actions are prioritized and implemented effectively; provide direction for privacy and data protection initiatives.
  • Provide leadership, guidance, and mentorship to cybersecurity and GRC team members, drive strong performance across all initiatives and support individual and team development.
  • Act as a trusted advisor to senior leadership on cybersecurity risk, architecture decisions, and strategic measures.
  • Use metrics to evaluate and track effectiveness of security, governance, and compliance initiatives.
  • Leverage exceptional communication skills to translate technical requirements into actionable business solutions.
What You'll Need
  • Ability to work in the San Francisco office an average of twice a week.
  • Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
  • 10+ years of relevant industry experience in Information Security, with 5+ years of managerial and strategic leadership experience.
  • Knowledge of data protection, privacy regulations, and cybersecurity governance frameworks.
  • Expertise in cloud security, including AWS and Azure, as well as cybersecurity architecture, application security, identity management, and Zero Trust.
  • Experience in data encryption, access controls, code reviews, and secure coding practices.
  • Expertise in building and implementing GRC frameworks and risk management processes.
  • Familiarity with regulatory compliance requirements, including PCI DSS, SOC 2, and ISO 27001.
  • Certified Information Systems Security Professional (CISSP) or equivalent certification is a plus.
  • Strong leadership and team-building skills.
  • Excellent written and verbal communication skills with external and internal stakeholders and executives, and the ability to simplify complex cybersecurity topics.  Ability to deliver constructive & encouraging feedback.
  • Proactive, organized, analytical, detail-oriented, and persistent.
  • Experience managing and overseeing external security service providers or technology partners.
Business Wire will not sponsor a new applicant for employment authorization for this position. 
 

What We Offer

The base salary range for this position is $230K to $245K/year.  Offered salary will be determined by several factors, including but not limited to: applicant’s education, experience, knowledge, skills and abilities, as well as internal equity and alignment with geographic market data.  Business Wire reserves the right to modify this salary range at any time.

Business Wire’s total rewards include:

  • Ability to work remotely
  • Excellent health benefits that begin on your first day of employment
  • $100 monthly fitness allotment, a tuition reimbursement program, and enhanced mental health resources
  • 401(k) plan with generous company match, and annual profit sharing contribution (subject to company performance)
  • PTO, Floating Holidays, Wellness Day Off, Birthday Day Off, and more!
A pre-employment background check will be required after the acceptance of an offer. Business Wire is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Pursuant to the San Francisco Fair Chance Ordinance and other similar state laws and local ordinances, and its internal policy, Business Wire will also consider for employment qualified applicants with arrest and conviction records.