1

Cybersecurity Risk Management Jobs in Kentucky (NOW HIRING)

Information Security Specialist

Paducah, KY · Hybrid

$21.35 - $26.69/hr

All employees are expected to protect the information and assets of the organization through heightened awareness of information security, cybersecurity, and risk management best practices, as well ...

We are currently seeking a Cybersecurity Specialist . This position's work schedule is hybrid in ... Management,Microsoft 365 Defender Suite,Security Risk Assessment,Vulnerability Scanning ...

Be Seen First

... cybersecurity training and proper incident documentation/reporting. 5. Vendor Management Support · Assist with vendor due diligence, SOC reviews, risk assessments, and contract renewals. · Ensure ...

Configuration Management Analyst

Louisville, KY · On-site +1

$73.40K - $100.10K/yr

Prior exposure to third-party risk management or cybersecurity programs in a healthcare or highly regulated environment. Use your skills to make an impact Job Title: Configuration Management Analyst ...

Configuration Management Analyst

Louisville, KY · On-site +1

$73.40K - $100.10K/yr

Prior exposure to third-party risk management or cybersecurity programs in a healthcare or highly regulated environment. Use your skills to make an impact Job Title: Configuration Management Analyst ...

Configuration Management Analyst

Louisville, KY · On-site +1

$73.40K - $100.10K/yr

Prior exposure to third-party risk management or cybersecurity programs in a healthcare or highly regulated environment. Use your skills to make an impact Job Title: Configuration Management Analyst ...

... risk management platform. • Work with development teams to define practical, risk-based ... and cybersecurity team • Provide hands-on guidance and documentation to improve developer ...

next page

Showing results 1-20

Cybersecurity Risk Management information

See Kentucky salary details

$49.5K

$115.5K

$161.5K

How much do cybersecurity risk management jobs pay per year?

As of May 29, 2026, the average yearly pay for cybersecurity risk management in Kentucky is $115,481.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,400.00 and $130,300.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive in Cybersecurity Risk Management, and why are they important?

To thrive in Cybersecurity Risk Management, you need a solid understanding of information security principles, risk assessment methodologies, compliance standards, and typically a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security tools, and professional certifications like CISSP or CRISC is highly valued. Strong analytical thinking, effective communication, and problem-solving skills help professionals translate technical risks for non-technical stakeholders and foster collaboration. These competencies are crucial to proactively identifying threats, managing vulnerabilities, and ensuring organizational resilience in a rapidly evolving digital landscape.

What are some common challenges faced by professionals in Cybersecurity Risk Management, and how can they be addressed?

Professionals in Cybersecurity Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, balancing security needs with business objectives, and ensuring compliance with industry regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and close collaboration with IT, legal, and business teams. Building strong partnerships across departments and investing in ongoing training can help mitigate these obstacles and support proactive risk management.

What is cybersecurity risk management?

Cybersecurity risk management is the process of identifying, assessing, and prioritizing risks to an organization's digital assets and information systems. It involves implementing strategies and controls to minimize the impact of potential cyber threats, such as data breaches, malware, and unauthorized access. The goal is to balance security measures with business needs, ensuring sensitive information remains protected while maintaining operational efficiency. Effective risk management is ongoing, adapting to new threats and changes within the organization.

What is the difference between Cybersecurity Risk Management vs Cybersecurity Analyst?

AspectCybersecurity Risk ManagementCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government, large enterprisesIT departments, cybersecurity firms, corporate security teams

Cybersecurity Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy creation and strategic planning. In contrast, a Cybersecurity Analyst primarily monitors security systems, responds to incidents, and analyzes vulnerabilities. Both roles require similar certifications but serve different functions within cybersecurity teams.

What are popular job titles related to Cybersecurity Risk Management jobs in Kentucky? For Cybersecurity Risk Management jobs in Kentucky, the most frequently searched job titles are:
What job categories do people searching Cybersecurity Risk Management jobs in Kentucky look for? The top searched job categories for Cybersecurity Risk Management jobs in Kentucky are:

Information Security Specialist

Banterra Corp.

Paducah, KY • Hybrid

$21.35 - $26.69/hr

Full-time

Posted 11 days ago


Job description

Pay Range: $21.35USD to $26.69USD

This position is designated as a Hybrid - Work from Home model with a mix of in-office and remote workdays. The specific schedule will be determined by the manager based on business needs. Candidates for this position are expected to live within a reasonable daily commuting distance

SUMMARY

The Information Security Specialist protects the organization’s sensitive data by applying cybersecurity best practices and managing risk. This position offers a great opportunity to grow in the field, as it involves conducting third-party risk assessments, supporting vendor security compliance, and collaborating across departments to strengthen defenses.

The ideal candidate should be a detail-oriented, strategic thinker with strong organizational skills and a willingness to learn. While a foundational understanding of cybersecurity principles is beneficial, a proactive mindset, adaptability, and dedication to continuous learning are equally valuable for success in this role.

This role provides hands-on experience in vendor management and risk mitigation while aligning security efforts with company objectives. By integrating security measures with business goals, the Information Security Specialist helps ensure trust and operational efficiency across Banterra and its affiliates, contributing to a safe and secure digital environment.

All employees are expected to protect the information and assets of the organization through heightened awareness of information security, cybersecurity, and risk management best practices, as well as complying with all applicable laws, regulations, and organizational policies.

ESSENTIAL DUTIES

  • Assist with the bank-wide information security risk management program and alignment with information security frameworks.
  • Contribute to Vendor Management Program due diligence, review, and reporting requirements, such as vendor due diligence reviews, service level agreements/auditing, and annual vendor preparation.
  • Aid in the creation, maintenance, and delivery of information security, cybersecurity awareness, and social engineering training programs.
  • Stay informed of information security best practices and cybersecurity threats to support information security program requirements and minimize risks to the organization.
  • Assist with preparation of reports for Management, Board of Directors, and auditors in support of the information security program (e.g., phish results, incident response related reporting, clean desk reviews, etc.).
  • Assist with preparation, file management, and associated documentation for the Information Security Committee.
  • Support various organizational projects by advising on information security and risk management related matters, with emphasis on third party risk management.
  • Participate in and perform access and system reviews in support of Information Security Program oversight requirements.
  • Gather evidence for and assist in the completion of information security and compliance framework assessments.
  • Assist with monitoring of Information Security Program to ensure policies, programs, and cybersecurity controls align with Information Security Program requirements.
  • Assume responsibility for additional projects and tasks as assigned.

EDUCATION & CERTIFICATIONS

  • Bachelor’s degree, certification in relevant field, or commensurate combination of education and experience required.

MINIMUM REQUIREMENTS

  • Working knowledge of core enterprise applications and interworking of various data processing functions and inherent risks.
  • Exceptional attention to detail with the ability to remain organized and produce accurate, efficient work in a fast-paced environment.
  • Strong critical-thinking skills and the ability to analyze potential project outcomes with the adaptability to redirect attention as needed to meet targets and deadlines.
  • Ability to complete standard calculations and apply basic mathematical concepts in practical situations.
  • Excellent communication skills and the ability to communicate effectively, verbally and in writing, with internal and external customers at all levels.
  • A positive and proactive approach to work, demonstrating enthusiasm, adaptability, and the ability to maintain composure and professionalism in stressful or adverse conditions.
  • Proficient computer literacy, including comfort with Microsoft systems and Office Suite.
  • Intermediate typing skills to meet the needs of this position.
  • Current driver’s license and reliable transportation with appropriate insurance coverage; additionally, the ability to drive occasionally in the course of performing assigned duties and responsibilities.
  • The ability to work with minimal or no supervision.

ADDITIONAL QUALIFICATIONS

  • Direct experience or training in cyber security, IT infrastructure, or a related field preferred.
  • Demonstrable understanding of banking operations preferred.

PHYSICAL DEMANDS AND WORK ENVIRONMENT

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the functions.

While performing the duties of this position, the employee is regularly required to talk or hear. The employee frequently is required to use hands or fingers; handle or feel objects, tools, or controls. The employee is occasionally required to stand; walk; sit; and reach with hands and arms. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this position include close vision, distance vision, and the ability to adjust focus. The noise level in the work environment is usually low to moderate.

NOTE

This job description in no way states or implies that these are the only duties to be performed by the employee(s) incumbent in this position. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments.

All duties and responsibilities are essential functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities. To perform this job successfully, the incumbents will possess the skills, aptitudes, and abilities to perform each duty proficiently.

Some requirements may exclude individuals who pose a direct threat or significant risk to the health or safety of themselves or others.

The requirements listed in this document are the minimum levels of knowledge, skills, or abilities. This document does not create an employment contract, implied or otherwise, other than an “at will” relationship.

The company is an Equal Opportunity Employer, drug-free workplace, and complies with ADA regulations and other laws/regulations as applicable.

Benefits: We are dedicated to creating a workplace where all team members feel valued and empowered. Our employee benefits promote well-being and professional growth, including insurance options, retirement plans, and career development opportunities included approved company paid training. Benefits include paid time off, medical, dental, vision and life insurance, 401(k) plan, tuition assistance, and more.