ZipRecruiter

Log In

1

Cybersecurity Risk Management Jobs in Kentucky (NOW HIRING)

Deloitte

Senior Manager - ServiceNow

Louisville, KY · On-site

... cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever ... Develop and execute strategies for integrated risk management (IRM), governance, risk, and ...

Deloitte

Consultant - ServiceNow

Louisville, KY · Remote

... in cybersecurity. Join our team to deliver powerful solutions that help clients navigate an ... manage cyber, risk, and technology programs. Recruiting for this role ends on 12/31/2026. Work you ...

Deloitte

Senior Consultant - ServiceNow

Louisville, KY · Remote

... in cybersecurity. Join our team to deliver powerful solutions that help clients navigate an ... Risk Management, and ServiceNow AI Control Tower use cases * Supporting functional design and ...

Deloitte

AI Security Engineer Senior Manager

Louisville, KY · On-site

$110K - $150K/yr

Project Management * Financials Cyber Security Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat ...

New

Akima

KY · On-site

The Integration Engineer/Cybersecurity Specialist assists with the design, integration, and ... system architecture, secure integration, risk management, and lifecycle sustainment.

Humana

Configuration Management Analyst

Louisville, KY · On-site +1

Prior exposure to third-party risk management or cybersecurity programs in a healthcare or highly regulated environment. Use your skills to make an impact Job Title: Configuration Management Analyst ...

Humana

Configuration Management Analyst

Louisville, KY · On-site +1

Prior exposure to third-party risk management or cybersecurity programs in a healthcare or highly regulated environment. Use your skills to make an impact Job Title: Configuration Management Analyst ...

Humana

Configuration Management Analyst

Louisville, KY · On-site +1

Prior exposure to third-party risk management or cybersecurity programs in a healthcare or highly regulated environment. Use your skills to make an impact Job Title: Configuration Management Analyst ...

next page

Showing results 1-20

All JobsCybersecurity Risk Management JobsCybersecurity Risk Management Jobs in Kentucky

Cybersecurity Risk Management information

See Kentucky salary details

$49.5K

$115.5K

$161.5K

How much do cybersecurity risk management jobs pay per year?

As of Jul 11, 2026, the average yearly pay for cybersecurity risk management in Kentucky is $115,481.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,400.00 and $130,300.00 per year, depending on experience, location, and employer.

Can I make $200,000 a year in cyber security?

Cybersecurity risk management professionals can earn $200,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and roles in senior management or specialized fields. Salary levels vary based on industry, location, and the complexity of the organization's security needs.

What are some common challenges faced by professionals in Cybersecurity Risk Management, and how can they be addressed?

Professionals in Cybersecurity Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, balancing security needs with business objectives, and ensuring compliance with industry regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and close collaboration with IT, legal, and business teams. Building strong partnerships across departments and investing in ongoing training can help mitigate these obstacles and support proactive risk management.

How much does a cybersecurity risk analyst make?

A cybersecurity risk analyst typically earns between $70,000 and $120,000 annually, depending on experience, certifications, and location. Entry-level positions may start lower, while experienced analysts with certifications like CISSP or CISA can earn higher salaries, especially in high-demand industries.

What is the difference between Cybersecurity Risk Management vs Cybersecurity Analyst?

AspectCybersecurity Risk ManagementCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government, large enterprisesIT departments, cybersecurity firms, corporate security teams

Cybersecurity Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy creation and strategic planning. In contrast, a Cybersecurity Analyst primarily monitors security systems, responds to incidents, and analyzes vulnerabilities. Both roles require similar certifications but serve different functions within cybersecurity teams.

What are the key skills and qualifications needed to thrive in Cybersecurity Risk Management, and why are they important?

To thrive in Cybersecurity Risk Management, you need a solid understanding of information security principles, risk assessment methodologies, compliance standards, and typically a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security tools, and professional certifications like CISSP or CRISC is highly valued. Strong analytical thinking, effective communication, and problem-solving skills help professionals translate technical risks for non-technical stakeholders and foster collaboration. These competencies are crucial to proactively identifying threats, managing vulnerabilities, and ensuring organizational resilience in a rapidly evolving digital landscape.

What does a cyber risk manager do?

A cyber risk manager assesses and prioritizes cybersecurity threats to an organization, develops strategies to mitigate risks, and implements security policies. They often use tools like risk assessment frameworks and require certifications such as CISSP or CISM to effectively manage security risks and ensure compliance.

What is cybersecurity risk management?

Cybersecurity risk management is the process of identifying, assessing, and prioritizing risks to an organization's digital assets and information systems. It involves implementing strategies and controls to minimize the impact of potential cyber threats, such as data breaches, malware, and unauthorized access. The goal is to balance security measures with business needs, ensuring sensitive information remains protected while maintaining operational efficiency. Effective risk management is ongoing, adapting to new threats and changes within the organization.

Can you make $500,000 a year in cyber security?

Cybersecurity risk management professionals can potentially earn $500,000 or more annually, especially at senior levels, in leadership roles, or with extensive experience and specialized certifications like CISSP or CISM. High salaries are often associated with executive positions, consulting, or working for large organizations with complex security needs.
What are popular job titles related to Cybersecurity Risk Management jobs in Kentucky? For Cybersecurity Risk Management jobs in Kentucky, the most frequently searched job titles are:
What job categories do people searching Cybersecurity Risk Management jobs in Kentucky look for? The top searched job categories for Cybersecurity Risk Management jobs in Kentucky are:
Cybersecurity Risk Management jobs near you
Infographic showing various Cybersecurity Risk Management job openings in Kentucky as of July 2026, with employment types broken down into 2% Locum Tenens, 86% Full Time, 9% Part Time, and 3% Contract. Highlights an 79% Physical, 5% Hybrid, and 16% Remote job distribution, with an average salary of $115,481 per year, or $55.5 per hour.
Client Security Strategist (vCSO)

Client Security Strategist (vCSO)

NetGain Technologies LLC

Lexington, KY • On-site, Remote

$70K - $90K/yr

Other

Posted 10 days ago

Job description

Description

We are seeking an experienced and strategic Client Security Strategist (vCSO) to lead and oversee NetGain contractual clientele's cybersecurity program. The vCSO will be responsible for developing security strategies, advising leadership on risk management, ensuring compliance with relevant standards, and helping protect the organization's systems, networks, data, and operations.


This role is ideal for a security professional who can combine hands-on technical knowledge with executive-level guidance and business alignment.


Key Responsibilities

  • Develop, implement, and maintain the organization's cybersecurity strategy, policies, and procedures
  • Assess security posture and identify gaps, vulnerabilities, and areas for improvement
  • Advise executive leadership on cybersecurity risks, incident preparedness, and security investments
  • Oversee risk assessments, security audits, and remediation planning
  • Guide security governance, compliance, and regulatory readiness efforts
  • Support incident response planning, breach response coordination, and post-incident analysis
  • Monitor emerging threats and recommend appropriate controls and mitigation strategies
  • Collaborate with IT, legal, compliance, and operational teams to align security with business objectives
  • Review third-party/vendor security risks and recommend safeguards
  • Help define and maintain business continuity and disaster recovery security considerations
  • Prepare reports, dashboards, and executive briefings on security performance and risk status
  • Promote security awareness and best practices across the organization

Required Qualifications

  • Minimum of 2 years of experience in IT security, cybersecurity, information security, or a related field
  • Experience in security governance, risk management, compliance, and incident response
  • Strong knowledge of network security, endpoint protection, identity and access management, cloud security, and security frameworks
  • Demonstrated ability to communicate technical security concepts to non-technical stakeholders and executive leadership
  • Experience developing security policies, standards, and strategic roadmaps
  • Strong analytical, organizational, and problem-solving skills
  • Ability to work independently in a virtual or fractional leadership capacity

Minimum Certification Requirement

Candidates must hold at least one of the following certifications:

  • SSCP (Systems Security Certified Practitioner), or a comparable cybersecurity certification

Preferred Qualifications

  • Experience serving as a vCISO, vCSO, Security Manager, or Information Security Consultant
  • Familiarity with compliance standards such as NIST, ISO 27001, SOC 2, HIPAA, GLBA, or CMMC
  • Experience with cloud environments such as AWS, Azure, or Google Cloud
  • Relevant advanced certifications such as CISSP, CISM, CRISC, or CISA
  • Experience in regulated industries or working with small to mid-sized businesses

Education

  • Bachelor's degree in information security, Cybersecurity, Computer Science, Information Technology, or a related field preferred
  • Equivalent professional experience may be considered in lieu of formal education

Work Environment

  • Remote/Virtual with some onsite work required (clientele mostly resides in the Arkansas (Little Rock) area.
  • Full-time

Success in This Role

A successful vCSO will provide practical and strategic security leadership, strengthen the organization's security posture, reduce risk exposure, and help ensure the business is prepared for evolving cyber threats.

Apply