ZipRecruiter

Log In

1

Cybersecurity Risk Management Jobs (NOW HIRING)

Truist

Chief Cybersecurity Risk Officer

Charlotte, NC · On-site

Reporting to the Chief Risk Information Officer (CIRO), this role serves as a critical second line of defense function, ensuring effective risk management across cybersecurity, while supporting the ...

Electrosoft

Cyber Security Risk Analyst

Belleville, IL · On-site

$115K - $125K/yr

... Cyber Security Risk Analyst Work Location: Required onsite work at the client location at Scott ... Management Framework (RMF) and Vulnerability Management to on-premises and Cloud networks.

Truist

Chief Cybersecurity Risk Officer

Atlanta, GA · On-site

Reporting to the Chief Risk Information Officer (CIRO), this role serves as a critical second line of defense function, ensuring effective risk management across cybersecurity, while supporting the ...

Truist

Chief Cybersecurity Risk Officer

Greensboro, NC · On-site

Reporting to the Chief Risk Information Officer (CIRO), this role serves as a critical second line of defense function, ensuring effective risk management across cybersecurity, while supporting the ...

Truist

Chief Cybersecurity Risk Officer

Richmond, VA · On-site

Reporting to the Chief Risk Information Officer (CIRO), this role serves as a critical second line of defense function, ensuring effective risk management across cybersecurity, while supporting the ...

Truist

Chief Cybersecurity Risk Officer

Raleigh, NC · On-site

Reporting to the Chief Risk Information Officer (CIRO), this role serves as a critical second line of defense function, ensuring effective risk management across cybersecurity, while supporting the ...

Truist

Chief Cybersecurity Risk Officer

Charlotte, NC · On-site

Reporting to the Chief Risk Information Officer (CIRO), this role serves as a critical second line of defense function, ensuring effective risk management across cybersecurity, while supporting the ...

previous page

Showing results 41-60

All JobsReal Estate JobsSecurity JobsCybersecurity Risk Management Jobs

Cybersecurity Risk Management information

See salary details

$57K

$133K

$186K

How much do cybersecurity risk management jobs pay per year?

As of Sep 2, 2026, the average yearly pay for cybersecurity risk management in the United States is $132,962.00, according to ZipRecruiter salary data. Most workers in this role earn between $111,000.00 and $150,000.00 per year, depending on experience, location, and employer.

What is cybersecurity risk management?

Cybersecurity risk management is the process of identifying, assessing, and prioritizing risks to an organization's digital assets and information systems. It involves implementing strategies and controls to minimize the impact of potential cyber threats, such as data breaches, malware, and unauthorized access. The goal is to balance security measures with business needs, ensuring sensitive information remains protected while maintaining operational efficiency. Effective risk management is ongoing, adapting to new threats and changes within the organization.

What are the key skills and qualifications needed to thrive in cybersecurity risk management, and why are they important?

To thrive in Cybersecurity Risk Management, you need a solid understanding of information security principles, risk assessment methodologies, compliance standards, and typically a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security tools, and professional certifications like CISSP or CRISC is highly valued. Strong analytical thinking, effective communication, and problem-solving skills help professionals translate technical risks for non-technical stakeholders and foster collaboration. These competencies are crucial to proactively identifying threats, managing vulnerabilities, and ensuring organizational resilience in a rapidly evolving digital landscape.

What are some common challenges faced by professionals in cybersecurity risk management, and how can they be addressed?

Professionals in Cybersecurity Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, balancing security needs with business objectives, and ensuring compliance with industry regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and close collaboration with IT, legal, and business teams. Building strong partnerships across departments and investing in ongoing training can help mitigate these obstacles and support proactive risk management.

What is the difference between Cybersecurity Risk Management vs Cybersecurity Analyst?

AspectCybersecurity Risk ManagementCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government, large enterprisesIT departments, cybersecurity firms, corporate security teams

Cybersecurity Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy creation and strategic planning. In contrast, a Cybersecurity Analyst primarily monitors security systems, responds to incidents, and analyzes vulnerabilities. Both roles require similar certifications but serve different functions within cybersecurity teams.

More about Cybersecurity Risk Management jobs

What cities are hiring for Cybersecurity Risk Management jobs?

Cities with the most Cybersecurity Risk Management job openings:

What states have the most Cybersecurity Risk Management jobs?

States with the most job openings for Cybersecurity Risk Management jobs include:

What job categories do people searching Cybersecurity Risk Management jobs look for?

The top searched job categories for Cybersecurity Risk Management jobs are:

Cybersecurity Risk Management jobs near you
Infographic showing various Cybersecurity Risk Management job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 14% Part Time, and 2% Contract. Highlights an 89% Physical, 2% Hybrid, and 9% Remote job distribution, with an average salary of $132,962 per year, or $63.9 per hour.

Senior Cybersecurity Risk & Governance Analyst

mTrade

Oxford, MS • On-site

Full-time

Posted 20 days ago

Job description

mTrade is seeking a highly motivated Senior Cybersecurity Risk & Governance Analyst to support and enhance our Information Security Governance, Risk, and Compliance (GRC) program. This role is responsible for helping identify, assess, monitor, and communicate cyber and technology risks across the organization while supporting third-party risk management, customer due diligence activities, audit coordination, and security governance initiatives.
This position reports into the Information Security organization and works closely with the Chief Information Security Officer (CISO), Technology, Compliance, Legal, Internal Audit, and business stakeholders. The successful candidate will contribute to strengthening the organization's cybersecurity posture, operational resilience, regulatory compliance, and customer trust programs.
This role offers significant exposure to cybersecurity governance, risk management, cloud security, third-party risk, customer assurance activities, executive reporting, and industry-standard security frameworks. It provides a growth path into senior cybersecurity governance, risk, compliance, and security leadership roles.
Key Responsibilities
Cybersecurity Governance & Risk Management:
  • Maintain and enhance the organization's cybersecurity governance, risk, and compliance program.
  • Conduct cyber and technology risk assessments for systems, business processes, cloud services, and strategic initiatives.
  • Maintain the enterprise risk register, ensuring risks, owners, mitigation plans, and status updates remain current.
  • Track key risk indicators (KRIs), emerging cyber threats, and remediation activities.
  • Assist technology and business teams with risk identification, treatment planning, and control implementation.
  • Support development and maintenance of information security policies, standards, procedures, and governance documentation.
  • Assist with cybersecurity risk reporting for executive leadership and governance committees.

Third-Party Risk Management:
  • Conduct vendor cybersecurity assessments and due diligence reviews for new and existing third-party relationships.
  • Evaluate vendor security documentation, including SOC reports, penetration test summaries, security assessments, audit reports, and compliance certifications.
  • Assess risks associated with cloud-hosted services, SaaS platforms, and strategic technology providers.
  • Track remediation activities resulting from third-party assessments and risk reviews.
  • Partner with Procurement, Legal, Compliance, Technology, and business stakeholders throughout the vendor lifecycle.
  • Maintain accurate third-party risk records and reporting within the organization's GRC platform.

Customer Security Assurance & Due Diligence:
  • Coordinate responses to customer security questionnaires, risk assessments, and due diligence requests.
  • Support customer audits and security review meetings.
  • Collaborate with Information Security, Technology, Privacy, Legal, Compliance, and business teams to gather accurate responses.
  • Maintain a centralized repository of approved security, compliance, risk, and privacy responses.
  • Support development and maintenance of customer assurance materials, including SOC reports, policy summaries, security overviews, and compliance documentation.
  • Identify opportunities to improve response quality, consistency, and efficiency through automation and AI-enabled tools.

Audit, Compliance & Control Assurance:
  • Support internal and external audits, including SOC examinations and customer audits.
  • Coordinate evidence collection, documentation, and stakeholder responses.
  • Assist with remediation tracking and validation of audit findings.
  • Monitor compliance with internal policies, regulatory requirements, and security frameworks.
  • Support control testing, assessment activities, and continuous improvement initiatives.

Metrics, Reporting & Governance:
  • Develop cybersecurity metrics, dashboards, and executive reporting materials.
  • Prepare risk summaries and presentations for management and governance committees.
  • Analyze risk trends and provide actionable recommendations to leadership.
  • Identify opportunities to enhance governance processes through data analytics, workflow automation, and AI-enabled technologies.
  • Support ongoing maturation of the cybersecurity program.

Required Qualifications
  • Bachelor's degree in Cybersecurity, Information Systems, Information Security, Risk Management, Business, Finance, Accounting, or a related field.
  • 5+ years of experience in cybersecurity risk management, IT risk, governance, compliance, internal audit, third-party risk management, operational risk, or related disciplines.
  • Experience working within financial services, fintech, banking, regulated technology, healthcare, insurance, or another regulated industry.
  • Experience conducting risk assessments and maintaining risk registers.
  • Experience responding to customer security questionnaires, due diligence requests, and audit inquiries.
  • Experience reviewing SOC 1 and SOC 2 reports, security assessments, and vendor due diligence materials.
  • Experience supporting SOC examinations, regulatory assessments, customer audits, or customer security reviews.
  • Demonstrated experience applying at least one recognized cybersecurity, risk, or control framework, such as NIST CSF, NIST 800-53, ISO 27001, CIS Controls, SOC 2, FFIEC, or PCI DSS.
  • Working familiarity with Microsoft Azure, Microsoft 365, cloud governance, and cloud security concepts.
  • Strong understanding of cybersecurity risk management concepts, governance practices, and internal controls.
  • Excellent written and verbal communication skills, including the ability to communicate effectively with senior leadership, auditors, regulators, customers, and technical teams.
  • Strong analytical, organizational, and problem-solving skills.
  • Ability to manage multiple priorities and work independently in a fast-paced environment.

Preferred Qualifications
  • Experience with GRC platforms such as ServiceNow GRC, Archer, LogicGate, AuditBoard, ProcessUnity, or similar solutions.
  • Experience leveraging AI-enabled technologies, workflow automation, Microsoft Copilot, Microsoft Power Platform, Microsoft Purview, or analytics platforms to improve security and risk processes.
  • One or more relevant professional certifications, such as CRISC, CISA, CISM, CISSP, CIA, or CRCM.
  • Experience supporting process improvement, risk reporting automation, or executive-level cybersecurity metrics and dashboards.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.
mTrade logo

About mTrade

Sourced by ZipRecruiter

Industry

Finance and insurance

Company size

51 - 200 Employees

Headquarters location

Oxford, MS, US

Year founded

2016

View All mTrade Jobs

Apply