1

Cyber Security Risk Management Jobs in Pennsylvania

$47K - $63K/yr

... risk management, hardware security, cryptography including post-quantum cryptography, and/or organizational and human factors in cybersecurity and privacy. Applicants should provide evidence of ...

... T audit, cybersecurity risk, operational risk, or a related field. * Experience assessing ... Experience with third-party risk management, AI risk, or emerging technology risk. * Relevant ...

Risk Scenario Development · Leads development of enterprise technology risk scenarios across: · Cybersecurity · Infrastructure availability · Cloud services · Identity and Access Management · ...

Cybersecurity Engineer

Mechanicsburg, PA · On-site

$150K - $185K/yr

Provide technical guidance on risk management, vulnerability mitigation, and cybersecurity best practices. * Track cybersecurity project milestones and coordinate activities across technical teams.

Cybersecurity Infrastructure availability Cloud services Identity and Access Management Data protection Artificial Intelligence Third-Party Technology Risk Executive Risk Reporting Produces executive ...

Showing results 41-60

Cyber Security Risk Management information

See Pennsylvania salary details

$57.1K

$133.3K

$186.4K

How much do cyber security risk management jobs pay per year?

As of Aug 22, 2026, the average yearly pay for cyber security risk management in Pennsylvania is $133,281.00, according to ZipRecruiter salary data. Most workers in this role earn between $111,300.00 and $150,400.00 per year, depending on experience, location, and employer.

What is cyber security risk management?

Cyber security risk management is the process of identifying, assessing, and prioritizing risks to an organization's information systems and data. It involves evaluating potential threats and vulnerabilities, determining the likelihood and impact of these risks, and implementing measures to mitigate or manage them. Effective risk management helps organizations protect sensitive data, ensure regulatory compliance, and minimize the impact of cyber attacks. This process is ongoing and adapts to new threats and changes in technology.

What are the key skills and qualifications needed to thrive in cyber security risk management?

To thrive in Cyber Security Risk Management, you need a solid understanding of risk assessment methodologies, information security frameworks (such as ISO 27001 or NIST), and often a relevant degree or certification like CISSP or CISM. Familiarity with security tools, vulnerability assessment platforms, and risk management software is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for identifying threats and conveying risk to stakeholders. These skills ensure that organizations can proactively manage and mitigate cyber threats, safeguarding critical assets and maintaining compliance.

What are some typical challenges faced in cyber security risk management, and how can they be addressed?

Professionals in Cyber Security Risk Management often encounter challenges such as staying updated with rapidly evolving threats, balancing security needs with business objectives, and ensuring compliance with various regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and the implementation of robust risk assessment frameworks. Collaboration with IT, legal, and business teams is essential to develop practical security policies that protect assets without hindering operations.

What is the difference between Cyber Security Risk Management vs Cyber Security Analyst?

AspectCyber Security Risk ManagementCyber Security Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CEH, CISSP (preferred)
Work EnvironmentPolicy development, risk assessment, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageOrganizations focusing on risk mitigation and complianceOrganizations implementing and maintaining security measures

Cyber Security Risk Management professionals focus on identifying, assessing, and mitigating security risks at an organizational level, often involved in policy and strategy. Cyber Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require similar certifications and work within the same industry, their core responsibilities differ: risk managers develop strategies, whereas analysts execute security measures and respond to threats.

What does a cyber security risk management do?

A cyber security risk management professional identifies, assesses, and prioritizes potential security threats to an organization’s information systems. They develop strategies and implement controls to mitigate risks, often using frameworks like NIST or ISO, and may conduct regular audits to ensure security measures are effective.

What are popular job titles related to Cyber Security Risk Management jobs in Pennsylvania?

For Cyber Security Risk Management jobs in Pennsylvania, the most frequently searched job titles are:

What job categories do people searching Cyber Security Risk Management jobs in Pennsylvania look for?

The top searched job categories for Cyber Security Risk Management jobs in Pennsylvania are:

What cities in Pennsylvania are hiring for Cyber Security Risk Management jobs?

Cities in Pennsylvania with the most Cyber Security Risk Management job openings:

Infographic showing various Cyber Security Risk Management job openings in Pennsylvania as of August 2026, with employment types broken down into 1% As Needed, 79% Full Time, 18% Part Time, and 2% Contract. Highlights an 84% Physical, 3% Hybrid, and 13% Remote job distribution, with an average salary of $133,281 per year, or $64.1 per hour.

Cybersecurity Professional

Carpenter Technology Corporation

Latrobe, PA • On-site

Full-time

Medical, Dental, Vision, Life, Retirement

Re-posted 14 days ago


Carpenter Technology rating

6.8

Company rating: 6.8 out of 10

Based on 29 frontline employees who took The Breakroom Quiz


Job description

Carpenter Technology Corporation is a leading producer and distributor of premium specialty alloys, including titanium alloys, nickel and cobalt based superalloys, stainless steels, alloy steels and tool steels. Carpenter Technology's high-performance materials and advanced process solutions are an integral part of critical applications used within the aerospace, transportation, medical and energy markets, among other markets. Building on its history of innovation, Carpenter Technology's wrought and powder technology capabilities support a range of next-generation products and manufacturing techniques, including novel magnetic materials and additive manufacturing.

Cybersecurity Professional - Raleigh, NC; Reading, PA; Tanner, AL

Primary Responsibilities for the Cybersecurity Professional:

  • Assists with cyber-threat monitoring and Security Operations Center (SOC) duties.
  • Performs daily security operations duties including handling service requests from Business and IT teams. Updates standard operating procedures and as-built documentation. Routinely publish performance metrics.
  • Monitors key security intelligence feeds and escalates relevant risks.
  • Participates in cybersecurity technology projects and lifecycle management.
  • Provides security technical assistance for IT projects intended to enable or advance business initiatives.
  • Supports secure integration of Cloud and Third-party Applications.
  • Assists with recurring patch and vulnerability management tasks.
  • Facilitates third-party penetration testing (Ethical Hacking) to confirm design and operational effectiveness of security controls.
  • Guides employees with security policy (e.g., password complexity, encryption settings, etc.) and advances cybersecurity awareness campaigns (e.g., Phishing email simulations).
  • Routinely publishes Governance, Risk, and Compliance (GRC) metrics.
  • Examines design and operational effectiveness of security controls. Coordinates audit engagements led by Internal Audit, Regulator, or external audit firm.
  • Supports assessment of internal and third-party cybersecurity risk. Examine audit reports (e.g., SOC 1, SOC 2, ISO 27001, etc.). Assist with customer inquiries about Carpenter compliance related to IT and Security.

Required for the Cybersecurity Professional:

  • Bachelor of Science degree in computer science or related field preferred. Or equivalent work experience.
  • Associate's degree in computer science or related field minimum required with a combination of Cybersecurity related certifications (e.g., CISSP, CISM, GCIH, GCIA, CEH, Security+, etc.) and additional 2 years' experience.
  • Minimum 7 years of related experience with Security Operations, Network Security, Vulnerability Management, Compliance, or Audit.

Preferred for the Cybersecurity Professional:

  • Advanced understanding of information technology.
  • Advanced knowledge of multiple security domains and common security controls.
  • Expert knowledge of 2-3 security domains.
  • Familiarity with common hacking techniques (e.g., malware, phishing, etc.) and effective counter measures.
  • Adoption of security best practices and industry standards (e.g. NIST, ISO, CIS, COBIT, etc.).
  • Hands-on operation of cybersecurity infrastructure (e.g., Firewalls, Intrusion Detection, AV, PKI, Encryption, etc.) and configuration experience.
  • Security Incident Response handling.
  • Malware analysis.
  • Multi-task and manage demands of multiple projects, incidents, and tasks.
  • Meet deadlines and manage changing priorities.
  • Perform effectively both independently and in a team environment.

Carpenter Technology Company offers a competitive salary and a comprehensive benefits package including life, medical, dental, vision, flexible spending accounts, disability coverage, 401k with company contributions as well as many other options to employees.

Carpenter Technology Corporation's policy is to fully and effectively maintain a program of equal employment opportunity and nondiscrimination for all employees, to employ affirmative action for all protected classes, and to recruit and develop the best qualified persons available regardless of age, race, color, religion, sex, gender identity, sexual orientation, marital status, national origin, political affiliation or any other characteristic protected by law. The Company also will recruit, develop and provide opportunities for qualified persons with disabilities and protected veterans.


What Carpenter Technology employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom