1

Cybersecurity Risk Management Jobs (NOW HIRING)

Cybersecurity Risk Analyst

Evansville, IN · On-site

$36.93 - $55.40/hr

Conduct cybersecurity risk assessments for systems, applications, infrastructure, and business ... Maintain risk registers, dashboards, and other risk management documentation * Develop reports and ...

Cybersecurity Risk Manager

Houston, TX · On-site +1

$70K - $140K/yr

Bachelor's degree in cybersecurity, risk management, or similar field * Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk. * In lieu of a Bachelor's degree 4 ...

Cybersecurity Risk Manager

Atlanta, GA · On-site +1

$70K - $140K/yr

Bachelor's degree in cybersecurity, risk management, or similar field * Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk. * In lieu of a Bachelor's degree 4 ...

Cybersecurity Risk Manager

Dallas, TX · On-site +1

$70K - $140K/yr

Bachelor's degree in cybersecurity, risk management, or similar field * Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk. * In lieu of a Bachelor's degree 4 ...

Bachelor's degree in cybersecurity, risk management, or similar field * Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk. * In lieu of a Bachelor's degree 4 ...

Cybersecurity Risk Manager

Tupelo, MS · On-site +1

$70K - $140K/yr

Bachelor's degree in cybersecurity, risk management, or similar field * Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk. * In lieu of a Bachelor's degree 4 ...

Cybersecurity Risk Manager

Tupelo, MS · On-site +1

$70K - $140K/yr

Bachelor's degree in cybersecurity, risk management, or similar field * Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk. * In lieu of a Bachelor's degree 4 ...

Cybersecurity Risk Manager

Fairlawn, OH · On-site +1

$70K - $140K/yr

Bachelor's degree in cybersecurity, risk management, or similar field * Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk. * In lieu of a Bachelor's degree 4 ...

Cybersecurity Risk Manager

Minnetonka, MN · On-site +1

$70K - $140K/yr

Bachelor's degree in cybersecurity, risk management, or similar field * Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk. * In lieu of a Bachelor's degree 4 ...

Cybersecurity Risk Manager

Atlanta, GA · On-site +1

$70K - $140K/yr

Bachelor's degree in cybersecurity, risk management, or similar field * Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk. * In lieu of a Bachelor's degree 4 ...

Cybersecurity Risk Manager

Houston, TX · On-site +1

$70K - $140K/yr

Bachelor's degree in cybersecurity, risk management, or similar field * Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk. * In lieu of a Bachelor's degree 4 ...

next page

Showing results 1-20

Cybersecurity Risk Management information

See salary details

$57K

$133K

$186K

How much do cybersecurity risk management jobs pay per year?

As of Jul 11, 2026, the average yearly pay for cybersecurity risk management in the United States is $132,962.00, according to ZipRecruiter salary data. Most workers in this role earn between $111,000.00 and $150,000.00 per year, depending on experience, location, and employer.

Can I make $200,000 a year in cyber security?

Cybersecurity risk management professionals can earn $200,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and roles in senior management or specialized fields. Salary levels vary based on industry, location, and the complexity of the organization's security needs.

What are some common challenges faced by professionals in Cybersecurity Risk Management, and how can they be addressed?

Professionals in Cybersecurity Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, balancing security needs with business objectives, and ensuring compliance with industry regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and close collaboration with IT, legal, and business teams. Building strong partnerships across departments and investing in ongoing training can help mitigate these obstacles and support proactive risk management.

How much does a cybersecurity risk analyst make?

A cybersecurity risk analyst typically earns between $70,000 and $120,000 annually, depending on experience, certifications, and location. Entry-level positions may start lower, while experienced analysts with certifications like CISSP or CISA can earn higher salaries, especially in high-demand industries.

What is the difference between Cybersecurity Risk Management vs Cybersecurity Analyst?

AspectCybersecurity Risk ManagementCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government, large enterprisesIT departments, cybersecurity firms, corporate security teams

Cybersecurity Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy creation and strategic planning. In contrast, a Cybersecurity Analyst primarily monitors security systems, responds to incidents, and analyzes vulnerabilities. Both roles require similar certifications but serve different functions within cybersecurity teams.

What are the key skills and qualifications needed to thrive in Cybersecurity Risk Management, and why are they important?

To thrive in Cybersecurity Risk Management, you need a solid understanding of information security principles, risk assessment methodologies, compliance standards, and typically a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security tools, and professional certifications like CISSP or CRISC is highly valued. Strong analytical thinking, effective communication, and problem-solving skills help professionals translate technical risks for non-technical stakeholders and foster collaboration. These competencies are crucial to proactively identifying threats, managing vulnerabilities, and ensuring organizational resilience in a rapidly evolving digital landscape.

What does a cyber risk manager do?

A cyber risk manager assesses and prioritizes cybersecurity threats to an organization, develops strategies to mitigate risks, and implements security policies. They often use tools like risk assessment frameworks and require certifications such as CISSP or CISM to effectively manage security risks and ensure compliance.

What is cybersecurity risk management?

Cybersecurity risk management is the process of identifying, assessing, and prioritizing risks to an organization's digital assets and information systems. It involves implementing strategies and controls to minimize the impact of potential cyber threats, such as data breaches, malware, and unauthorized access. The goal is to balance security measures with business needs, ensuring sensitive information remains protected while maintaining operational efficiency. Effective risk management is ongoing, adapting to new threats and changes within the organization.

Can you make $500,000 a year in cyber security?

Cybersecurity risk management professionals can potentially earn $500,000 or more annually, especially at senior levels, in leadership roles, or with extensive experience and specialized certifications like CISSP or CISM. High salaries are often associated with executive positions, consulting, or working for large organizations with complex security needs.
More about Cybersecurity Risk Management jobs
What cities are hiring for Cybersecurity Risk Management jobs? Cities with the most Cybersecurity Risk Management job openings:
What states have the most Cybersecurity Risk Management jobs? States with the most job openings for Cybersecurity Risk Management jobs include:
What job categories do people searching Cybersecurity Risk Management jobs look for? The top searched job categories for Cybersecurity Risk Management jobs are:
Infographic showing various Cybersecurity Risk Management job openings in the United States as of July 2026, with employment types broken down into 3% Locum Tenens, 89% Full Time, 5% Part Time, and 3% Contract. Highlights an 79% Physical, 5% Hybrid, and 16% Remote job distribution, with an average salary of $132,962 per year, or $63.9 per hour.
Cybersecurity & Risk Management Framework Specialist

Cybersecurity & Risk Management Framework Specialist

Booz Allen Hamilton, Inc.

Honolulu, HI • On-site

$69K - $158K/yr

Full-time, Part-time

Medical, Life, Retirement, PTO

Re-posted 2 days ago


Booz Allen Hamilton rating

8.8

Company rating: 8.8 out of 10

Based on 47 frontline employees who took The Breakroom Quiz

9th of 58 rated business consultants


Job description


Remote Work:
No
Job Number:
R0242623
Location:
Honolulu,HI,US
Share job via:
Share
Cybersecurity & Risk Management Framework Specialist
The Opportunity:
Manage the application of analytical risk management principles that enable organizations to achieve mission assurance by preparing for, preventing, mitigating, responding to, and recovering from emergencies. Apply advanced skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction. Mentor and supervise team members. Support enterprise cybersecurity governance, risk management, compliance, and innovation activities for Department of War (DoW) information systems and networks. Assume responsibility for developing cybersecurity strategies, managing the Risk Management Framework (RMF) process, ensuring regulatory compliance, and supporting mission partners with cybersecurity risk mitigation and emerging threat awareness. Work across multiple cybersecurity functions, including governance, RMF operations, compliance monitoring, and cyber threat innovation initiatives.
Join us. The world can't wait.
You Have:
  • 5+ years of experience with IT operations or cybersecurity
  • Experience in a cybersecurity compliance, operations, or engineering leadership role
  • Experience supporting cybersecurity compliance, audits, or inspections
  • Ability to work with and guide senior leaders, including CISO, CIO, CTO, and executives to ideate, build, and execute cybersecurity capability maturation
  • Ability to collaborate with project and proposal teams to incorporate cybersecurity solutions and develop high quality implementation plans and roadmaps
  • Ability to author technical documentation, whitepapers, and blogs on leading cybersecurity topics and concepts
  • TS/SCI clearance
  • HS diploma or GED
  • Information Security Certification such as CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification

Nice If You Have:
  • Experience working on defense or national security issues in the Indo-Pacific region
  • Experience working at a DoW Command-level Headquarters
  • Experience with NIST 800-53 and DoD 8500 or 8510
  • Experience selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations
  • Experience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)
  • Knowledge of the Enterprise Mission Assurance Support Service (eMASS) and Mission Partner Engagement (MPE)
  • Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big Data
  • Ability to support the development of cybersecurity policies or governance frameworks
  • Possession of excellent verbal and written communication skills
  • Bachelor's degree

Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.
  • Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
  • Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
  • Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
Not ready to apply? Join our Talent Community and sign up for job alerts.

What Booz Allen Hamilton employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom


Booz Allen Hamilton logo

About Booz Allen Hamilton

Sourced by ZipRecruiter

Booz Allen Hamilton is a leading provider of management and technology consulting services to the US government in defense, intelligence, and civil markets. Headquartered in McLean, Virginia, the firm also serves major corporations, institutions, and not-for-profit organizations. Founded in 1914 by Edwin G. Booz, the company has a long-standing tradition of helping clients achieve success by delivering a wide range of consulting services that include strategic planning, human capital and learning, communication, systems development, and others. The company's mission is to empower people to change the world, and it has a reputation for maintaining the highest standards of integrity and-excellence.

Industry

It services

Company size

10,000+ Employees

Headquarters location

McLean, VA, US

Year founded

1914