ZipRecruiter

Log In

1

Cybersecurity Risk Analyst Jobs (NOW HIRING)

City of New York

Cyber Risk Analyst

Brooklyn, NY · On-site

... cybersecurity risks across NYC agencies. Responsibilities : • Build new risk processes and ... analyze various cybersecurity risk cases, justifications, and exceptions documents submitted by ...

MISO

Senior GRC Risk Analyst

Carmel, IN · On-site

$105K - $130K/yr

Are you passionate about cybersecurity and protecting critical infrastructure? Join MISO as a Senior GRC Risk Analyst , where you will play a key role in safeguarding the power grid by identifying ...

MISO Energy

Senior GRC Risk Analyst

Carmel, IN · On-site

$105K - $130K/yr

Description Are you passionate about cybersecurity and protecting critical infrastructure? Join MISO as a Senior GRC Risk Analyst , where you will play a key role in safeguarding the power grid by ...

New

MISO

Senior GRC Risk Analyst

Carmel, IN · On-site

$105K - $130K/yr

Description Are you passionate about cybersecurity and protecting critical infrastructure? Join MISO as a Senior GRC Risk Analyst , where you will play a key role in safeguarding the power grid by ...

next page

Showing results 1-20

All JobsCybersecurity Risk Analyst Jobs

Cybersecurity Risk Analyst information

See salary details

$15

$40

$65

How much do cybersecurity risk analyst jobs pay per hour?

As of Jul 3, 2026, the average hourly pay for cybersecurity risk analyst in the United States is $40.49, according to ZipRecruiter salary data. Most workers in this role earn between $29.81 and $49.28 per hour, depending on experience, location, and employer.

What is the difference between Cybersecurity Risk Analyst vs Cybersecurity Analyst?

AspectCybersecurity Risk AnalystCybersecurity Analyst
CertificationsCompTIA Security+, CISSP, CISACompTIA Security+, CEH, CISSP
Primary FocusAssessing and managing security risksMonitoring, detecting, and responding to security threats
Work EnvironmentRisk management teams, security departmentsSecurity operations centers, IT teams
Industry UsageFinance, healthcare, governmentAll industries with cybersecurity needs

While both roles involve cybersecurity, the Cybersecurity Risk Analyst primarily focuses on identifying and mitigating security risks, whereas the Cybersecurity Analyst concentrates on monitoring and responding to security incidents. Understanding these differences helps organizations assign the right roles for their security needs.

What are the key skills and qualifications needed to thrive as a Cybersecurity Risk Analyst, and why are they important?

To thrive as a Cybersecurity Risk Analyst, you need a deep understanding of information security principles, risk management frameworks, and typically hold a degree in computer science or a related field. Familiarity with tools like vulnerability scanners, SIEM systems, and certifications such as CISSP or CISM is highly valued. Strong analytical thinking, effective communication, and attention to detail help you identify risks and convey complex information to stakeholders. These skills and qualifications are vital to proactively safeguard organizational assets and ensure compliance in an evolving threat landscape.

Is 30 too old for cyber security?

Cybersecurity Risk Analysts can enter the field at any age, as experience, skills, and certifications like CompTIA Security+ or CISSP are often more important than age. Many professionals transition into cybersecurity later in their careers, bringing valuable perspectives and expertise. Age is generally not a barrier to starting or advancing in cybersecurity roles.

How much does a cybersecurity risk analyst make?

A cybersecurity risk analyst's average salary in the United States ranges from $70,000 to $120,000 annually, depending on experience, certifications, and location. Entry-level positions typically start around $60,000, while experienced analysts with certifications like CISSP or CISA can earn over $130,000. The role often requires knowledge of risk assessment tools and security frameworks.

What are some common challenges faced by Cybersecurity Risk Analysts when working with cross-functional teams?

Cybersecurity Risk Analysts often collaborate with IT, compliance, and business units to assess and mitigate risks. A common challenge is translating complex technical risks into language that non-technical stakeholders can understand and act upon. Additionally, balancing security requirements with business objectives may require negotiation and creative problem-solving. Effective communication and relationship-building skills are key to ensuring that security recommendations are adopted across the organization.

What does a Cybersecurity Risk Analyst do?

A Cybersecurity Risk Analyst is responsible for identifying, assessing, and mitigating risks related to an organization’s information systems and data. They evaluate potential threats and vulnerabilities, develop strategies to minimize risks, and ensure compliance with security policies and regulations. Their work helps protect sensitive data and maintain the integrity and confidentiality of digital assets. Analysts often collaborate with IT and business teams to implement security controls and respond to security incidents.

What does a cyber security risk analyst do?

A cybersecurity risk analyst evaluates an organization’s security posture by identifying vulnerabilities, assessing potential threats, and recommending measures to mitigate risks. They often use tools like risk assessment frameworks and require knowledge of security protocols, compliance standards, and threat intelligence. Their work helps organizations protect sensitive data and maintain secure systems.

Can you make $500,000 a year in cyber security?

Cybersecurity Risk Analysts typically earn between $70,000 and $130,000 annually, with top-tier professionals in senior or specialized roles potentially earning over $200,000. Achieving a salary of $500,000 usually requires advanced certifications, extensive experience, leadership positions, or working in high-paying industries or consulting roles.
More about Cybersecurity Risk Analyst jobs
What cities are hiring for Cybersecurity Risk Analyst jobs? Cities with the most Cybersecurity Risk Analyst job openings:
What states have the most Cybersecurity Risk Analyst jobs? States with the most job openings for Cybersecurity Risk Analyst jobs include:
Cybersecurity Risk Analyst jobs near you
Infographic showing various Cybersecurity Risk Analyst job openings in the United States as of June 2026, with employment types broken down into 99% Full Time, and 1% Part Time. Highlights an 85% Physical, 5% Hybrid, and 10% Remote job distribution, with an average salary of $84,210 per year, or $40.5 per hour.
Cyber Security Risk Analyst

Cyber Security Risk Analyst

Federal Reserve Bank of New York

Manhattan, NY • On-site

Full-time

Posted 5 days ago

Job description

Job Summary:
Federal Reserve Bank of New York is dedicated to supporting the strength of the U.S. economy and stability of the global financial system. The Cyber Security Risk Analyst will be responsible for conducting risk assessments, managing security application testing, and collaborating with technology teams to ensure compliance and security in cloud migration workloads.
Responsibilities:
• Perform Cloud application security risk assessments.
• Execute assessments timely and accurately.
• Manage relationship with the business unit assigned.
• Embed within the development squad to provide timely security advice.
• Preform application security testing ensuring only compliant workloads move to the Cloud.
• Support development squads in implementing security tooling in the CI/CD pipeline.
Qualifications:
Required:
• Experience in executing assessments in the Cloud and against third party SaaS solutions.
• Expert knowledge of performing risk management based on NIST 800-53.
• Experience in determining vulnerability risk impact on key objectives and critical processes; ability to link risk management programs and initiatives to inform critical business strategies and processes.
• Experience in thriving in the DevSecOps culture and working closely with developers on delivering business value in agile quick release environment.
• Demonstrated leadership experience, managing projects, strong decision making and execution abilities.
• Strong experience managing and timely resolving security findings in the Agile management practice.
• Expert level application security testing skills supporting CI/CD pipeline.
• Experience evaluating 3rd party vendors supporting Banks processes with focus on data protection.
• Proven ability evaluating and securing Gen AI systems with internal and embedded models.
• Possession of or the ability to obtain and maintain National Security Clearance, which includes U.S. Citizenship when required.
Company:
The Federal Reserve Bank of New York is a regional reserve bank that sets monetary policy and maintains financial stability in New York. Founded in 1913, the company is headquartered in New York, USA, with a team of 1001-5000 employees. The company is currently Late Stage.

Apply