ZipRecruiter

Log In

1

Cybersecurity Risk Management Jobs in Philadelphia, PA

UGI

Global Sr GRC Analyst

King Of Prussia, PA · On-site

The Global GRC Senior Analyst will report directly to the Global Cybersecurity Governance, Risk and Compliance Manager. This role involves collaborating with cross-functional teams to design ...

Comcast

Senior Cybersecurity Engineer

Philadelphia, PA · On-site +1

$115K - $158K/yr

Assess cybersecurity risk across software, cloud, infrastructure, vulnerability management, and privacy programs; translate findings into actionable remediation guidance. * Provide secure ...

Comcast

Senior Cybersecurity Engineer

Philadelphia, PA · On-site +1

$115K - $158K/yr

Assess cybersecurity risk across software, cloud, infrastructure, vulnerability management, and privacy programs; translate findings into actionable remediation guidance. * Provide secure ...

Judge Group, Inc.

Manager, IT Security, GRC

Burlington, NJ · On-site

$150K - $175K/yr

A Day in the Life Enterprise Cyber Risk Management: * Lead enterprise-wide cybersecurity risk assessments across business units and IT domains. * Own the accuracy and ongoing maintenance of the ...

New

next page

Showing results 1-20

All JobsCybersecurity Risk Management JobsCybersecurity Risk Management Jobs in Philadelphia, PA

Cybersecurity Risk Management information

See Philadelphia, PA salary details

$57.5K

$134.2K

$187.7K

How much do cybersecurity risk management jobs pay per year?

As of Aug 8, 2026, the average yearly pay for cybersecurity risk management in Philadelphia, PA is $134,170.00, according to ZipRecruiter salary data. Most workers in this role earn between $112,000.00 and $151,400.00 per year, depending on experience, location, and employer.

What are some common challenges faced by professionals in cybersecurity risk management, and how can they be addressed?

Professionals in Cybersecurity Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, balancing security needs with business objectives, and ensuring compliance with industry regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and close collaboration with IT, legal, and business teams. Building strong partnerships across departments and investing in ongoing training can help mitigate these obstacles and support proactive risk management.

What is the difference between Cybersecurity Risk Management vs Cybersecurity Analyst?

AspectCybersecurity Risk ManagementCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government, large enterprisesIT departments, cybersecurity firms, corporate security teams

Cybersecurity Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy creation and strategic planning. In contrast, a Cybersecurity Analyst primarily monitors security systems, responds to incidents, and analyzes vulnerabilities. Both roles require similar certifications but serve different functions within cybersecurity teams.

What are the key skills and qualifications needed to thrive in cybersecurity risk management, and why are they important?

To thrive in Cybersecurity Risk Management, you need a solid understanding of information security principles, risk assessment methodologies, compliance standards, and typically a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security tools, and professional certifications like CISSP or CRISC is highly valued. Strong analytical thinking, effective communication, and problem-solving skills help professionals translate technical risks for non-technical stakeholders and foster collaboration. These competencies are crucial to proactively identifying threats, managing vulnerabilities, and ensuring organizational resilience in a rapidly evolving digital landscape.

What is cybersecurity risk management?

Cybersecurity risk management is the process of identifying, assessing, and prioritizing risks to an organization's digital assets and information systems. It involves implementing strategies and controls to minimize the impact of potential cyber threats, such as data breaches, malware, and unauthorized access. The goal is to balance security measures with business needs, ensuring sensitive information remains protected while maintaining operational efficiency. Effective risk management is ongoing, adapting to new threats and changes within the organization.
What are popular job titles related to Cybersecurity Risk Management jobs in Philadelphia, PA? For Cybersecurity Risk Management jobs in Philadelphia, PA, the most frequently searched job titles are:
What job categories do people searching Cybersecurity Risk Management jobs in Philadelphia, PA look for? The top searched job categories for Cybersecurity Risk Management jobs in Philadelphia, PA are:
What cities near Philadelphia, PA are hiring for Cybersecurity Risk Management jobs? Cities near Philadelphia, PA with the most Cybersecurity Risk Management job openings:
Cybersecurity Risk Management jobs near you
Infographic showing various Cybersecurity Risk Management job openings in Philadelphia, PA as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 13% Part Time, and 3% Contract. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution, with an average salary of $134,170 per year, or $64.5 per hour.

Cybersecurity Risk Management Analyst

Chubb

Philadelphia, PA • On-site

Full-time

Posted 2 days ago

New

Chubb rating

8.2

Company rating: 8.2 out of 10

Based on 66 frontline employees who took The Breakroom Quiz

141st of 303 rated insurance

Job description

As a Cybersecurity Risk Analyst on our Cyber GRC Engineering team, you will apply engineering, automation, and data analytics principles to strengthen governance, risk, and compliance across Chubb's cybersecurity environment. You will serve as a hands-on platform specialist for ServiceNow IRM, helping optimize and enhance the GRC ecosystem so it continues to meet Chubb's evolving cybersecurity analytics, compliance, and risk management needs. In this role, you will connect data, controls, and risk signals to drive deeper risk analysis, proactively identify potential issues before risk is realized, and support executive reporting on application security exposure and broader cybersecurity risk. You will also play a key role in managing the platform, including how data is reviewed, how workflows are executed, and how AI capabilities are leveraged within the platform to improve automation, insight generation, and operational efficiency.

In this role, you will:

  • Design and implement automated control testing workflows in partnership with the Cyber Risk & Assurance Manager, including detailed automation playbooks for compliance and control testing
  • Own and enhance ServiceNow IRM workflows, including issue and exception management, automated ticketing, and compliance tracking
  • Implement and maintain automated risk scoring and InfoSec criticality rating calculations based on methodology defined by the Cyber Risk Assessment team, while ensuring the logic remains aligned as the methodology evolves
  • Build and maintain custom workflows, connectors, and integrations within ServiceNow IRM to support expanding GRC Engineering use cases
  • Analyze control, risk, and exception data to identify trends, validate potential gaps, and surface issues that require remediation before they become realized risk
  • Support executive reporting by translating technical findings into clear, actionable insight on application security risk and broader cybersecurity exposure
  • Help optimize the GRC platform through automation, AI-enabled capabilities, and workflow improvements that strengthen Chubb's cybersecurity analytics and risk management posture
  • Partner cross-functionally to ensure the platform ecosystem continues to support Chubb's broader technical environment and evolving security requirements
Chubb is a world leader in insurance. With operations in 54 countries, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance, and life insurance to a diverse group of clients. The company is distinguished by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength, underwriting excellence, superior claims handling expertise and local operations globally.

At Chubb, we are committed to equal employment opportunity and compliance with all laws and regulations pertaining to it. Our policy is to provide employment, training, compensation, promotion, and other conditions or opportunities of employment, without regard to race, color, religious creed, sex, gender, gender identity, gender expression, sexual orientation, marital status, national origin, ancestry, mental and physical disability, medical condition, genetic information, military and veteran status, age, and pregnancy or any other characteristic protected by law. Performance and qualifications are the only basis upon which we hire, assign, promote, compensate, develop and retain employees. Chubb prohibits all unlawful discrimination, harassment and retaliation against any individual who reports discrimination or harassment.
  • A minimum of 5 years of experience in GRC technology, IT automation, or security platform engineering
  • Hands-on ServiceNow development experience, with strong preference for the IRM module; experience with other GRC modules and/or platforms is also acceptable
  • Demonstrated Python scripting experience in a production or automation environment
  • Experience supporting cyber risk, compliance, or audit functions
  • Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent practical experience
  • ServiceNow certification, such as CIS-IRM or equivalent, is a plus
  • Experience with API and integration development for platform connectors is a plus
  • Familiarity with insurance or financial services risk and compliance environments is a plus

What Chubb employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Chubb logo

About Chubb

Sourced by ZipRecruiter

Chubb is the world's largest publicly traded property and casualty insurer. With operations in 54 countries, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. We are a unique global organization with a culture of individuals passionately committed to our respective crafts. With underwriting at our core, each of us contributes to providing the best insurance coverage and service to our clients. Our highly collaborative, inclusive nature helps us drive better business outcomes through diversity of background, experiences, insights and values.

Industry

Insurance services

Company size

10,000+ Employees

Headquarters location

Warren, NJ, US

View All Chubb Jobs

Apply