1

Cybersecurity Risk Management Analyst Jobs (NOW HIRING)

next page

Showing results 1-20

Cybersecurity Risk Management Analyst information

See salary details

$15

$40

$65

How much do cybersecurity risk management analyst jobs pay per hour?

As of Jun 20, 2026, the average hourly pay for cybersecurity risk management analyst in the United States is $40.49, according to ZipRecruiter salary data. Most workers in this role earn between $29.81 and $49.28 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Cybersecurity Risk Management Analyst, and why are they important?

To thrive as a Cybersecurity Risk Management Analyst, you need a solid understanding of information security principles, risk assessment methodologies, and regulatory frameworks, typically backed by a degree in cybersecurity or a related field. Familiarity with tools such as risk management software, vulnerability scanners, and certifications like CISSP, CISM, or CRISC is highly valued. Strong analytical thinking, attention to detail, and effective communication skills help in translating technical risks into actionable insights for stakeholders. These skills ensure organizations can proactively identify, assess, and mitigate cyber risks to protect sensitive information and maintain regulatory compliance.

What does a Cybersecurity Risk Management Analyst do?

A Cybersecurity Risk Management Analyst is responsible for identifying, assessing, and mitigating risks to an organization's information systems and data. They analyze security policies, conduct risk assessments, and recommend controls to minimize potential threats. Their work involves monitoring security measures, ensuring compliance with regulations, and helping develop strategies to protect the organization from cyberattacks. Ultimately, they play a crucial role in safeguarding sensitive information and supporting overall cybersecurity posture.

What are some typical challenges a Cybersecurity Risk Management Analyst faces when working with cross-functional teams?

Cybersecurity Risk Management Analysts often collaborate with IT, legal, compliance, and business units to identify and mitigate risks. A common challenge is bridging the communication gap between technical and non-technical stakeholders, ensuring that risk recommendations are understood and actionable. Additionally, balancing business objectives with security requirements can be complex, requiring strong negotiation and diplomacy skills. Analysts must also stay updated on evolving threats while tailoring solutions to each department’s unique needs.

What is the difference between Cybersecurity Risk Management Analyst vs Cybersecurity Analyst?

AspectCybersecurity Risk Management AnalystCybersecurity Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentFocus on risk assessment, policy development, and complianceFocus on threat detection, incident response, and system monitoring
Employer & Industry UsageUsed in organizations prioritizing risk mitigation and complianceUsed across various sectors for security operations and monitoring

While both roles involve cybersecurity, the Cybersecurity Risk Management Analyst primarily assesses and manages risks, ensuring compliance and policy adherence. In contrast, the Cybersecurity Analyst concentrates on identifying threats, monitoring security systems, and responding to incidents. Both roles are essential but focus on different aspects of cybersecurity defense.

More about Cybersecurity Risk Management Analyst jobs
What cities are hiring for Cybersecurity Risk Management Analyst jobs? Cities with the most Cybersecurity Risk Management Analyst job openings:
What states have the most Cybersecurity Risk Management Analyst jobs? States with the most job openings for Cybersecurity Risk Management Analyst jobs include:
What job categories do people searching Cybersecurity Risk Management Analyst jobs look for? The top searched job categories for Cybersecurity Risk Management Analyst jobs are:
Infographic showing various Cybersecurity Risk Management Analyst job openings in the United States as of June 2026, with employment types broken down into 98% Full Time, and 2% Part Time. Highlights an 81% Physical, 8% Hybrid, and 11% Remote job distribution, with an average salary of $84,210 per year, or $40.5 per hour.

Cloud/Cyber Risk Management Analyst Sr

Flagstar Bank

New York, NY

$90K - $150K/yr

Full-time

Medical, Dental, Vision, Life

Posted 5 days ago


Job description

Position Title

Cloud/Cyber Risk Management Analyst Sr

Location

New York, NY 10018

Job Summary

***This is an Onsite role in Midtown NYC***
As a key member of the second line of defense Technology, Cyber, Third Party Risk Management & Resilience Risk Management team, the Cyber Risk Management Analyst Sr will support the Cyber Risk team to fulfill the Bank's Second Line of Defense ("2LoD") mandate to identify, measure, monitor, and manage the Cybersecurity/Information Security ("Cyber") risk profile of the Bank, ensuring risk exposure remains within the Bank's established risk appetite. The candidate will be expected to demonstrate independent, effective, outcome-based oversight and challenge for the risk domains within the First Line of Defense ("1LoD") CISO and Information Security team, IT Risk, IT Infrastructure and Architecture teams, as well as IT business technology teams.

Job Responsibilities:

JOB RESPONSIBILITIES

  • Provides independent, proactive oversight and challenge of Cyber risk management at the Bank through execution of risk framework elements including RCSA, control assessment, issue management, incident reviews, targeted deep dives, key risk indicators and through embedded monitoring of Cyber programs.
  • Provides feedback to IT Risk, CISO, and other IT teams on risks, controls, testing, root cause analysis, remediation and reporting.
  • Assesses and report Cyber risk profile based on quantitative and qualitative risk measures and including assessment of effectiveness of planned remediation/mitigation of excess risk exposure and compliance with key regulatory requirements.
  • Uses independent judgement and discretion to make decisions.
  • Analyzes and resolves problems.


ADDITIONAL ACCOUNTABILITIES

  • Performs special projects, and additional duties and responsibilities as required.
  • Consistently adheres to regulatory and compliance policies and standards linked to the job as listed and complete required compliance trainings. Accountable to maintain compliance with applicable federal, state and local laws and regulations.


JOB REQUIREMENTS


Required Qualifications:

  • Education level required: Undergraduate Degree (4 years or equivalent) in Computer Science, Information Technology, Cybersecurity or relevant field.
  • Minimum experience required: 6+ Years in an information technology, cybersecurity, risk, audit, and/or compliance role.


Preferred Qualifications:

  • 2-3 years in a related function at a financial institution preferred.
  • Applicable information security, enterprise risk, and/or compliance certifications and/or experience.
  • Working knowledge of a GRC Risk Tool.


Job Competencies:

  • Excellent knowledge of core IS and cybersecurity controls (e.g. IAM, DLP, vulnerability management, security threat detection and response, networks, cloud technologies, etc.).
  • Strong knowledge of IT and Cyber risk management concepts and applicable interagency regulatory guidance (e.g. FFIEC guidelines).
  • Ability to provide outcome based risk oversight and challenge to first line risk management.
  • Knowledge of non-financial risk frameworks.
  • Strong analytical skills with the ability to interpret data, draw conclusions, and formulate recommendations.
  • Strong verbal and written communications skills
  • Ability to utilize advanced Excel functionality, create engaging and informative PowerPoint presentations, and work effectively in Word.
  • Detail oriented with strong organizational skills, able to thrive in a fast-paced environment with multiple competing priorities at times.
  • Demonstrates a strong ability to build and maintain effective relationships with stakeholders by communicating clearly, engaging in proactive collaboration, and leveraging cross functional insights. Aligns relationship building efforts with enterprise goals to accelerate performance and drive strategic results.
  • Builds trusted client relationships, whether internal or external, by identifying needs and delivering tailored solutions to enhance the overall client experience.
  • Fosters or supports a positive work culture and productive work environment, displaying importance of effective relationships with customers and stakeholders.
  • Physical demands (ADA): No unusual physical exertion is involved.

Flagstar is an Equal Opportunity Employer

We are committed to providing clear and accurate compensation information in accordance with applicable laws. Actual starting base pay will be determined based on location, experience, and other non-discriminatory factors permitted by law. Total compensation may also include variable incentives, bonuses, commissions, or other awards as outlined in the offer of employment. Flagstar provides teammates access to a variety of benefits including medical, dental, vision, life, and disability insurance, as well as a comprehensive leave program. Please click the following link for detailed information:Benefits | Flagstar Bank

Pay Range

$90,597.00 - $150,440.00