ZipRecruiter

Log In

1

Cybersecurity Risk Management Jobs in Draper, UT

RainFocus

Cybersecurity Engineer (Remote)

Lehi, UT · On-site +1

... an exceptional Cybersecurity Engineer . About RainFocus RainFocus cares about its employees ... Risk & Change Management: Own and conduct system impact analyses for proposed changes, represent ...

Provo

Cybersecurity Analyst

Provo, UT · On-site

$72K - $118K/yr

Experience conducting security reviews, risk assessments, or vulnerability analysis. * Familiarity ... By planning growth thoughtfully and managing resources responsibly, we maintain a future for Provo ...

Provo City

Cybersecurity Analyst

Provo, UT · On-site

$72K - $118K/yr

Experience conducting security reviews, risk assessments, or vulnerability analysis. * Familiarity ... By planning growth thoughtfully and managing resources responsibly, we maintain a future for Provo ...

Ampcus Inc

Java Web Developer

Salt Lake City, UT · On-site

Ampcus is a global business, technology consulting and an staff augmentation firm specializing in AI/ML,digital solutions, Cybersecurity & Risk management, Testing, Forensics & Fraud services and ...

Arcticwolf

Cyber Operations Analyst

Pleasant Grove, UT · On-site

... Risk Management to provide post-incident remediation activities. Responsibilities * Analyze ... Understanding of core cybersecurity principles and security fundamentals. * Basic knowledge of ...

previous pagenext page

Showing results 21-40

All JobsCybersecurity Risk Management JobsCybersecurity Risk Management Jobs in Draper, UT

Cybersecurity Risk Management information

See Draper, UT salary details

$53.3K

$124.3K

$173.9K

How much do cybersecurity risk management jobs pay per year?

As of Aug 21, 2026, the average yearly pay for cybersecurity risk management in Draper, UT is $124,299.00, according to ZipRecruiter salary data. Most workers in this role earn between $103,800.00 and $140,200.00 per year, depending on experience, location, and employer.

What is cybersecurity risk management?

Cybersecurity risk management is the process of identifying, assessing, and prioritizing risks to an organization's digital assets and information systems. It involves implementing strategies and controls to minimize the impact of potential cyber threats, such as data breaches, malware, and unauthorized access. The goal is to balance security measures with business needs, ensuring sensitive information remains protected while maintaining operational efficiency. Effective risk management is ongoing, adapting to new threats and changes within the organization.

What are the key skills and qualifications needed to thrive in cybersecurity risk management, and why are they important?

To thrive in Cybersecurity Risk Management, you need a solid understanding of information security principles, risk assessment methodologies, compliance standards, and typically a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security tools, and professional certifications like CISSP or CRISC is highly valued. Strong analytical thinking, effective communication, and problem-solving skills help professionals translate technical risks for non-technical stakeholders and foster collaboration. These competencies are crucial to proactively identifying threats, managing vulnerabilities, and ensuring organizational resilience in a rapidly evolving digital landscape.

What are some common challenges faced by professionals in cybersecurity risk management, and how can they be addressed?

Professionals in Cybersecurity Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, balancing security needs with business objectives, and ensuring compliance with industry regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and close collaboration with IT, legal, and business teams. Building strong partnerships across departments and investing in ongoing training can help mitigate these obstacles and support proactive risk management.

What is the difference between Cybersecurity Risk Management vs Cybersecurity Analyst?

AspectCybersecurity Risk ManagementCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government, large enterprisesIT departments, cybersecurity firms, corporate security teams

Cybersecurity Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy creation and strategic planning. In contrast, a Cybersecurity Analyst primarily monitors security systems, responds to incidents, and analyzes vulnerabilities. Both roles require similar certifications but serve different functions within cybersecurity teams.

What are popular job titles related to Cybersecurity Risk Management jobs in Draper, UT?

For Cybersecurity Risk Management jobs in Draper, UT, the most frequently searched job titles are:

What job categories do people searching Cybersecurity Risk Management jobs in Draper, UT look for?

The top searched job categories for Cybersecurity Risk Management jobs in Draper, UT are:

What cities near Draper, UT are hiring for Cybersecurity Risk Management jobs?

Cities near Draper, UT with the most Cybersecurity Risk Management job openings:

Cybersecurity Risk Management jobs near you
Infographic showing various Cybersecurity Risk Management job openings in Draper, UT as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 13% Part Time, and 3% Contract. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution, with an average salary of $124,299 per year, or $59.8 per hour.

Cybersecurity Engineer (Remote)

RainFocus

Lehi, UT • On-site, Remote

Full-time

Retirement, PTO

Re-posted 6 days ago

Job description

RainFocus, one of the most innovative software companies, is in search of an exceptional Cybersecurity Engineer.
About RainFocus
RainFocus cares about its employees, customers, and the world in which we live. Our rapidly growing team serves Fortune 500 companies like Adobe, Cisco, IBM, Oracle, VMware, and others to prepare and execute in-person, virtual, and hybrid events across the world. Those events are delivered through our industry-disrupting software platform, with groundbreaking business intelligence, to elevate the attendee experience, streamline event operations, and accelerate marketing results. We are well-funded, growing fast, and building a company that is changing the market - it will be challenging, fun, and exciting.
About the Role
As a Security Engineer, you will play a critical role in safeguarding our organization's digital assets, infrastructure, and application ecosystem. This is a mid-level, autonomous role (not entry-level) where you will bridge the gap between IT operations, software development, and risk management.
You won't just be reviewing logs, settings, and configs; you will be actively replicating vulnerabilities, collaborating with developers on secure architecture, managing our bug bounty program, and keeping our security tool stack running smoothly.
Core Responsibilities
  • Vulnerability & Application Security Management: Own the vulnerability management program end-to-end: oversee continuous vulnerability scanning (Tenable) and software composition analysis/code dependencies (Sonarqube), drive remediation across teams, and replicate and validate discovered vulnerabilities using tools like Burp Suite and Kali Linux.
  • Crowdsourced Security & Threat Intel: Manage and triage our crowdsourced bug bounty program (BugCrowd) and monitor our external security posture rating (Bitsight).
  • Secure Development Collaboration: Act as the security voice in developer architecture meetings. Partner with engineering teams to review code dependencies, threat-model new features, and ensure secure coding practices.
  • Risk & Change Management: Own and conduct system impact analyses for proposed changes, represent security on the Change Control Board (CCB), and lead threat modeling sessions for new systems, features, and infrastructure changes.
  • Incident Management & Operations: Triage and document security incidents within OneTrust and Jira. Collaborate with DevOps to ensure security tools are properly deployed across AWS environments and endpoint configurations.
  • Endpoint & Tool Oversight: Maintain a "read-only/audit" oversight of our endpoint detection, MDM, and email security tools (Sophos, JAMF, BetterCloud) to ensure compliance and active alerting.
  • Security Awareness & Culture: Administer the security awareness learning modules (RF Academy) and lead internal initiatives to keep security top-of-mind for all employees.

Required Skills & Qualifications
  • Citizenship: All candidates must be a US citizen.
  • Experience: 3-5 years of dedicated experience in a technical cybersecurity role (e.g., Security Engineer, AppSec Engineer, or Senior Security Analyst, etc.).
  • Application Security: Strong familiarity with the OWASP Top 10, web application security testing, and reviewing secure code dependencies (SCA).
  • Vulnerability Assessment: Proven experience running enterprise vulnerability scanners, interpreting results, and driving remediation across cross-functional teams.
  • Cloud & Infrastructure: Foundational knowledge of cloud environments (specifically AWS) and securing cloud-native applications.
  • Communication: Excellent collaboration skills. You must be able to sit down with software developers, understand their sprint goals, and help them fix security bugs without breaking their workflow.

Preferred Experience & Tool Stack
Direct experience with our specific stack is a massive plus:
  • AppSec/PenTesting: Burp Suite, Kali Linux, BugCrowd, Sonarqube
  • SecOps & Vulnerability: Tenable, Bitsight, OneTrust
  • IT & Endpoint Ecosystem: Jira, AWS, Sophos, JAMF, PDQ, BetterCloud
  • Certifications: CompTIA Security+, CEH, GIAC, or progress toward a CISSP, or other relevant certifications
  • Automation: Basic scripting skills (Python, PowerShell, or Bash) to automate repetitive security tasks or log analysis.
  • Security Frameworks: Experience with maintaining compliance with PCI-DSS, ISO 27001, and SOC 2 frameworks.
  • Artificial Intelligence: Experience utilizing AI to improve productivity and efficiency, as well as experience reviewing AI tools, integrations, and features.

Success Measures
  • Proactive Remediation: Decreased time-to-remediation for vulnerabilities identified by Tenable and BugCrowd.
  • Seamless Dev Integration: Active, constructive participation in developer sprint/architecture cycles, resulting in fewer security defects reaching production.
  • Incident Readiness: Efficient tracking, documentation, and resolution of incidents within OneTrust

Success Measures
  • Reduced number of security incidents and vulnerabilities.
  • Timely and effective incident response and resolution.
  • Successful implementation and adherence to security policies and procedures.
  • Positive feedback from internal teams on security awareness and training programs.
  • Successful completion of security audits and compliance assessments.

Why work at RainFocus?
At RainFocus we delight millions of attendees at large-scale events by delivering better insights, experiences, and marketing. We were able to pivot our product and services offering in 2020 to continue growing and serving new clients and events.
As a member of the RainFocus team, you will have the opportunity to experience first-hand the impact of our platform at events around the world. Additionally, RainFocus offers competitive salaries, competitive benefits, 401k, generous PTO, and countless other team building activities.
What are you waiting for? Apply today! We need more talented, hard-working, fun-loving team members just like yourself!
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Apply