ZipRecruiter

Log In

1

Cybersecurity Risk Analyst Jobs in Minnesota (NOW HIRING)

Xcel Energy

Security Risk Analyst

Minneapolis, MN · On-site

Collaborates with senior and lead risk analysts on activities related to risk modeling ... Security & Risk Background:~5+ years of experience in cybersecurity, IT risk, GRC, audit ...

legence

Lead Cybersecurity Specialist

Minneapolis, MN · Remote

$125K - $165K/yr

The Lead Cybersecurity Specialist within the Legence IT Security organization will be responsible ... cyber analysts tasked with advancing Legence's security posture and reducing risk. This role is ...

next page

Showing results 1-20

All JobsCybersecurity Risk Analyst JobsCybersecurity Risk Analyst Jobs in Minnesota

Cybersecurity Risk Analyst information

See Minnesota salary details

$15

$39

$64

How much do cybersecurity risk analyst jobs pay per hour?

As of Jul 28, 2026, the average hourly pay for cybersecurity risk analyst in Minnesota is $39.65, according to ZipRecruiter salary data. Most workers in this role earn between $29.18 and $48.27 per hour, depending on experience, location, and employer.

What is the difference between Cybersecurity Risk Analyst vs Cybersecurity Analyst?

AspectCybersecurity Risk AnalystCybersecurity Analyst
CertificationsCompTIA Security+, CISSP, CISACompTIA Security+, CEH, CISSP
Primary FocusAssessing and managing security risksMonitoring, detecting, and responding to security threats
Work EnvironmentRisk management teams, security departmentsSecurity operations centers, IT teams
Industry UsageFinance, healthcare, governmentAll industries with cybersecurity needs

While both roles involve cybersecurity, the Cybersecurity Risk Analyst primarily focuses on identifying and mitigating security risks, whereas the Cybersecurity Analyst concentrates on monitoring and responding to security incidents. Understanding these differences helps organizations assign the right roles for their security needs.

What are the key skills and qualifications needed to thrive as a Cybersecurity Risk Analyst, and why are they important?

To thrive as a Cybersecurity Risk Analyst, you need a deep understanding of information security principles, risk management frameworks, and typically hold a degree in computer science or a related field. Familiarity with tools like vulnerability scanners, SIEM systems, and certifications such as CISSP or CISM is highly valued. Strong analytical thinking, effective communication, and attention to detail help you identify risks and convey complex information to stakeholders. These skills and qualifications are vital to proactively safeguard organizational assets and ensure compliance in an evolving threat landscape.

Is 30 too old for cyber security?

Cybersecurity Risk Analysts can enter the field at any age, as experience, skills, and certifications like CompTIA Security+ or CISSP are often more important than age. Many professionals transition into cybersecurity later in their careers, bringing valuable perspectives and expertise. Age is generally not a barrier to starting or advancing in cybersecurity roles.

How much does a cybersecurity risk analyst make?

A cybersecurity risk analyst's average salary in the United States ranges from $70,000 to $120,000 annually, depending on experience, certifications, and location. Entry-level positions typically start around $60,000, while experienced analysts with certifications like CISSP or CISA can earn over $130,000. The role often requires knowledge of risk assessment tools and security frameworks.

What are some common challenges faced by Cybersecurity Risk Analysts when working with cross-functional teams?

Cybersecurity Risk Analysts often collaborate with IT, compliance, and business units to assess and mitigate risks. A common challenge is translating complex technical risks into language that non-technical stakeholders can understand and act upon. Additionally, balancing security requirements with business objectives may require negotiation and creative problem-solving. Effective communication and relationship-building skills are key to ensuring that security recommendations are adopted across the organization.

What does a Cybersecurity Risk Analyst do?

A Cybersecurity Risk Analyst is responsible for identifying, assessing, and mitigating risks related to an organization’s information systems and data. They evaluate potential threats and vulnerabilities, develop strategies to minimize risks, and ensure compliance with security policies and regulations. Their work helps protect sensitive data and maintain the integrity and confidentiality of digital assets. Analysts often collaborate with IT and business teams to implement security controls and respond to security incidents.

What does a cyber security risk analyst do?

A cybersecurity risk analyst evaluates an organization’s security posture by identifying vulnerabilities, assessing potential threats, and recommending measures to mitigate risks. They often use tools like risk assessment frameworks and require knowledge of security protocols, compliance standards, and threat intelligence. Their work helps organizations protect sensitive data and maintain secure systems.

Can you make $500,000 a year in cyber security?

Cybersecurity Risk Analysts typically earn between $70,000 and $130,000 annually, with top-tier professionals in senior or specialized roles potentially earning over $200,000. Achieving a salary of $500,000 usually requires advanced certifications, extensive experience, leadership positions, or working in high-paying industries or consulting roles.
Cybersecurity Risk Analyst jobs near you
Infographic showing various Cybersecurity Risk Analyst job openings in Minnesota as of July 2026, with employment types broken down into 87% Full Time, 8% Part Time, 1% Temporary, and 4% Contract. Highlights an 85% Physical, 6% Hybrid, and 9% Remote job distribution, with an average salary of $82,476 per year, or $39.7 per hour.
IT Cyber Security Risk Analyst

IT Cyber Security Risk Analyst

Cretex Companies, Inc.

Elk River, MN

$60K - $91K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 24 days ago

Job description

Overview

The Cybersecurity Risk Analyst is a key member of the Digital & IT team, helping drive a culture of cybersecurity, improve risk posture, and enhance user-focused security practices across the enterprise.This individual will serve as a backup to the Security Engineer(s), assisting with incident response, employee support, and cybersecurity projects. They will lead efforts to improve employee cybersecurity awareness, champion a Zero Trust approach to access and identity management, and help ensure business continuity and disaster recovery plans are in place, tested, and improved over time.This role blends hands-on technical support with program management and education, making it ideal for someone who is both people-oriented and detail-driven.

Responsibilities

Essential Job Functions                                                                

Security Operations Support

  • Act as a secondary resource for daily security monitoring, incident response, and vulnerability remediation.
  • Assist in configuring and managing tools related to endpoint protection, logging, email security, and access control.
  • Help execute security-related projects, such as patching programs, encryption rollouts, and policy enforcement.

Access Management & Zero Trust Initiatives

  • Help assess and improve identity and access management practices across systems.
  • Partner with IT teams to implement role-based access controls and Just-In-Time access principles.
  • Lead projects and process design supporting Zero Trust architecture, especially for remote access and SaaS tools.
  • Participate in account reviews and privilege audits to ensure appropriate access levels.

Cybersecurity Awareness & Culture

  • Develop and lead training and awareness campaigns to reduce employee-related cyber risk.
  • Manage phishing simulation programs and track effectiveness.
  • Deliver cybersecurity onboarding for new employees and ongoing training for all staff.
  • Serve as the go-to contact for employee questions related to phishing, passwords, or safe technology use.

Risk Management & Resilience

  • Own the development and maintenance of Business Continuity and Disaster Recovery plans.
  • Facilitate tabletop exercises and capture lessons learned to enhance resilience.
  • Collaborate with IT and business leaders to identify and reduce operational risk.
  • Contribute to regulatory, insurance, and customer security documentation as needed.

Governance, Policy, and Metrics

  • Assist in drafting and maintaining cybersecurity policies and procedures.
  • Track and report on training compliance, incidents, and risk KPIs.
  • Stay current on emerging cyber threats and security trends, providing proactive recommendations.
  • Coordinate with external vendors (e.g., MDR, IAM, phishing) and internal teams to support tool effectiveness and projects.
Qualifications

Minimum Requirements, Education & Experience (incl. KSA's and certifications)

  • Bachelor's degree in Cybersecurity, Information Technology, or a related field
  • 2+ years in IT or cybersecurity roles, ideally with experience in user support, IAM, or risk management
  • Excellent communication and teaching skills; comfortable presenting to technical and non-technical audiences
  • Familiarity with Zero Trust concepts and tools (e.g., MFA, identity providers, conditional access)
  • Working knowledge of phishing, endpoint protection, and threat mitigation techniques
  • Strong organizational and documentation skills

Desirable Criteria & Qualifications

  • Security certifications (e.g., Security+, SSAP, GSEC, or similar)
  • Experience with identity & access management tools (e.g., Azure AD, Okta, Duo, etc.)
  • Experience managing phishing simulation platforms (Mimecast, KnowBe4)
  • Familiarity with business continuity planning and disaster recovery best practices
  • Experience conducting or facilitating tabletop exercises
  • Exposure to NIST, ISO 27001, or CIS Controls frameworks
  • Manufacturing, regulated industry, or multi-site IT experience

#LI-JW1

Pay RangeUSD $60,800.00 - USD $91,200.00 /Yr.Pay Range Details

This pay range reflects the base hourly rate or annual salary for positions within this job grade, based on our market-based pay structures. Actual compensation will depend on factors such as skills, relevant experience, education, internal equity, business needs, and local market conditions. While the full hiring range is shared for transparency, offers are rarely made at the minimum or maximum of the range.

Company Benefits

All Employees:

Our 401k retirement savings plan with a company match contribution; onsite health clinics, discretionary holiday bonus program (based on years of service), Cretex University, 24/7 employee assistance program with access to five confidential visits with a licensed counselor at no cost, wellness program with incentives, an employee death benefit, and employee sick and safe leave are available to all Cretex employees. 

20+hours:

Cretex's medical benefit package includes: comprehensive medical insurance with access to virtual providers; dental insurance (Little Partners Dental benefit covers services 100 percent for children 12 and younger when seen by a Health Partners in network provider); vision insurance; a pre-tax health savings account, healthcare and dependent care pre-tax reimbursement accounts; paid holidays, paid time off; and our discretionary profit sharing program are available to employees working 20+ hours/week. 

30+ hours:

Parental Leave, accident and critical illness benefits, optional employee, spouse, and child life; short and long term disability; company provided life insurance; and tuition assistance programs are available to employees working 30+ hours per week. 

(Some benefits are subject to eligibility criteria.)

Applicants will receive consideration for employment regardless of their race, color, creed, religion, national origin, sex, sexual orientation, gender identity, disability, age, veteran status, marital status, family status, status with regard to public assistance, or any other protected status as required by law.  

Our company uses E-Verify to confirm the employment and eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.dhs.gov/E-Verify.

Employment Type: FULL_TIME

Apply