ZipRecruiter

Log In

1

Information Security Risk Analyst Jobs (NOW HIRING)

Mitchell Martin

Sr. Information Security Risk Analyst

$120K/yr

Title: Sr. Information Security Risk Analyst Location: Kansas City ,MO Position Type : Full Time Compensation Pay Range:$120,000 Per Year Description Join our team as a Senior Information Security ...

UMB

Sr. Information Security Risk Analyst

Kansas City, MO · On-site

$100K - $120K/yr

Sr. Information Security Risk Analyst As part of UMB's Corporate Information Security and Privacy (CISP) team, the mission is to identify threats, vulnerabilities, and risks and to help protect the ...

blueStone

Security/Risk Analyst

Appleton, WI

Great opportunity for a hands-on Sr. Security/Risk Analyst, an IT leader with ambition and drive to provide strategy, vision, communication, and direction regarding security risks to safeguard ...

next page

Showing results 1-20

All JobsInformation Security Risk Analyst Jobs

Information Security Risk Analyst information

See salary details

$31

$58

$75

How much do information security risk analyst jobs pay per hour?

As of Jun 26, 2026, the average hourly pay for information security risk analyst in the United States is $58.45, according to ZipRecruiter salary data. Most workers in this role earn between $45.43 and $65.62 per hour, depending on experience, location, and employer.

What is the difference between Information Security Risk Analyst vs Cybersecurity Analyst?

AspectInformation Security Risk AnalystCybersecurity Analyst
CertificationsISO 27001, CISSP, CISACompTIA Security+, CEH, CISSP
Work EnvironmentRisk assessment teams, compliance departmentsSecurity operations centers, incident response teams
Employer & Industry UsageFinancial, healthcare, government sectorsTech companies, cybersecurity firms, enterprises

While both roles focus on protecting information assets, the Information Security Risk Analyst primarily assesses and manages risks related to information security policies and compliance. In contrast, the Cybersecurity Analyst actively monitors security systems, responds to threats, and handles incidents. Understanding these differences helps organizations assign the right responsibilities and professionals to safeguard their digital assets.

What are the key skills and qualifications needed to thrive as an Information Security Risk Analyst, and why are they important?

To thrive as an Information Security Risk Analyst, you need a solid understanding of cybersecurity principles, risk management frameworks, and a relevant degree or certifications such as CISSP, CISM, or CRISC. Familiarity with tools like risk assessment platforms, vulnerability scanners, and security information and event management (SIEM) systems is typically required. Strong analytical thinking, communication, and attention to detail help you translate complex risks into actionable recommendations and collaborate with stakeholders. These skills are crucial for effectively identifying, assessing, and mitigating security risks to protect organizational assets and ensure compliance.

What are Information Security Risk Analysts?

Information Security Risk Analysts are professionals responsible for identifying, assessing, and mitigating risks to an organization's information systems and data. They analyze potential threats, vulnerabilities, and impacts to ensure that appropriate security measures are in place. These analysts often develop risk management strategies, conduct security assessments, and recommend security enhancements. Their goal is to help organizations protect sensitive information and comply with relevant regulations.

What Does an Information Security Risk Analyst Do?

As an information security risk analyst, your job is to help assess each potential threat and determine whether or not your current network system suffers from vulnerability to that threat. In this IT role, you may monitor network activity, help implement and manage safety protocols, and research emerging threats to help determine the best response to them. Information security risk analysts often work with many other IT personnel at the same company to manage security needs and, somewhat unusually for an IT role, may also collaborate with outside experts and volunteers to find the best way to counter a particular threat. This is an extremely collaborative position, so the ability to work well with other people, including those you may be meeting for the first time, is essential to your success.

How does an Information Security Risk Analyst typically collaborate with other departments to address security risks?

Information Security Risk Analysts work closely with various departments such as IT, compliance, legal, and business units to identify and mitigate security risks. They often facilitate risk assessments, communicate findings, and recommend solutions tailored to each department's needs. Regular meetings and cross-functional projects are common, ensuring security measures align with business objectives while maintaining compliance. This collaborative approach helps foster a culture of security awareness throughout the organization.
More about Information Security Risk Analyst jobs
What cities are hiring for Information Security Risk Analyst jobs? Cities with the most Information Security Risk Analyst job openings:
What are the most commonly searched types of Information Security Risk Analyst jobs? The most popular types of Information Security Risk Analyst jobs are:
Who are the top companies hiring for Information Security Risk Analyst jobs? The top employers for Information Security Risk Analyst jobs are:
What states have the most Information Security Risk Analyst jobs? States with the most job openings for Information Security Risk Analyst jobs include:
What job categories do people searching Information Security Risk Analyst jobs look for? The top searched job categories for Information Security Risk Analyst jobs are:
What are popular job titles related to Information Security Risk Analyst jobs? For Information Security Risk Analyst jobs, the most frequently searched job titles are:
Information Security Risk Analyst jobs near you
Infographic showing various Information Security Risk Analyst job openings in the United States as of June 2026, with employment types broken down into 67% Full Time, and 33% Contract. Highlights an 33% In-person, 34% Hybrid, and 33% Remote job distribution, with an average salary of $121,577 per year, or $58.5 per hour.

Information Security Risk Analyst

Rutgers University

New Brunswick, NJ • On-site

$108K/yr

Full-time

Medical, Dental, Life, Retirement, PTO

Posted 11 days ago

Rutgers University rating

7.7

Company rating: 7.7 out of 10

Based on 66 frontline employees who took The Breakroom Quiz

220th of 539 rated colleges and universities

Job description

Position Details
Position Information
Recruitment/Posting Title
Information Security Risk Analyst
Job Category
Staff & Executive - Information Technology
Department
OIT - Information Security
Overview
Rutgers, The State University of New Jersey, is a leading national research university and the State of New Jersey's preeminent, comprehensive public institution of higher education. As one of the largest employers in the State of New Jersey, Rutgers University is committed not only to the students and the State that we serve, but also to the faculty and staff who work on our campuses.
For two consecutive years, Rutgers is ranked on Forbes' list of America's Best Large Employers. Rutgers holds #64 of 500 employers and is the #1 New Jersey employer on the publication's 2023 list. Rutgers' commitment to its employees includes maintaining and fostering a safe, diverse, and respectful workplace environment, creating employment opportunities for our nation's military veterans, and ensuring accessibility and accommodation for individuals with disabilities.
Posting Summary
Rutgers, The State University of New Jersey is seeking an Information Security Risk Analyst for the Office of Information Security (OIT). This position will report to the Information Security Risk Manager.
Among the key duties of this position are the following:
  • Facilitates and evaluates internal and third-party information security risk assessments.
  • Provides risk remediation recommendations to mitigate identified control gaps and promotes awareness of available supporting resources and technologies.
  • Works closely with stakeholders across campus to ensure that risks are well documented and communicated.
  • Maintains a formal risk register that supports security governance and ensures security findings are aligned with business objectives.
  • Acts as an SME for the end-to-end management of findings related to information security assessments for vendors and applications.
  • Assists in creating policies and procedures to help reduce risk.
  • Performs other assigned tasks.

FLSA
Exempt
Grade
07
Salary Details
Minimum Salary
108147.000
Mid Range Salary
136809.000
Maximum Salary
165471.000
Offer Information
The final salary offer may be determined by several factors, including, but not limited to, the candidate's qualifications, experience, and expertise, and availability of department or grant funds to support the position. We also take into consideration market benchmarks, if and when appropriate, and internal equity to ensure fair compensation relative to the university's broader compensation structure. We are committed to offering competitive and flexible compensation packages to attract and retain top talent.
Benefits
Rutgers provides a comprehensive benefits package to eligible employees. The specific benefits vary based on the position and may include:
  • Medical, prescription drug, and dental coverage
  • Paid vacation, holidays, and various leave programs
  • Competitive retirement benefits, including defined contribution plans and voluntary tax-deferred savings options
  • Employee and dependent educational benefits (when applicable)
  • Life insurance coverage
  • Employee discount programs

Position Status
Full Time
Working Hours
Standard Hours
37.50
Daily Work Shift
Work Arrangement
Consistent with the current application of Rutgers Policy 60.3.22 or the applicable provisions of relevant collective negotiations agreements, this position may be eligible for a hybrid work arrangement. Flexible work arrangements are not permanent, subject to change or discontinuation, and contingent on the employee receiving approval in the FlexWork@RU Application System.
Union Description
Admin Assembly (MPSC)
Payroll Designation
PeopleSoft
Seniority Unit
Terms of Appointment
Staff - 12 month
Position Pension Eligibility
ABP
Qualifications
Minimum Education and Experience
  • Bachelor's degree in Computer Science, Information Systems, Management Information Systems or a related field and a minimum of five (5) years of experience in Information Security programs.

Certifications/Licenses
Required Knowledge, Skills, and Abilities
  • Knowledge of HIPAA, GLBA and PCI DSS regulations and frameworks such as NIST CSF.
  • Excellent interpersonal, communication and influencing skills.
  • Ability to collaborate effectively across a variety of disciplines and levels inside/outside the organization.
  • Ability to effectively analyze, document and communicate information security concepts to different user bases, including students, faculty, staff and systems personnel.

Preferred Qualifications
  • Minimum of five (5) years of experience performing information security assessments in accordance with relevant regulatory requirements.
  • Demonstrated skill in conducting internal or external risk assessments and providing guidance on the implementation, monitoring, and reporting of control processes, documentation, compliance measures, and/or remediation items.
  • Ability to communicate complex technical issues to diverse audiences, both orally and in writing, in a clear, authoritative, and actionable manner.
  • Ability to identify and assess the severity and potential impact of risks and communicate findings effectively to risk owners.
  • Knowledge of common cybersecurity frameworks and standards (e.g., NIST 800-171, ISO 27001/27002).
  • Experience with Governance, Risk, and Compliance (GRC) and/or Vendor Risk Management (VRM) platforms.
  • Strong interpersonal skills with the ability to work effectively with both technical and non-technical personnel at various organizational levels.
  • CISSP or CRISC certification.

Equipment Utilized
Physical Demands and Work Environment
Special Conditions
Posting Details
Posting Number
26ST1322
Posting Open Date
06/16/2026
Special Instructions to Applicants
Regional Campus
Rutgers University-New Brunswick
Home Location Campus
Rutgers University - New Brunswick
City
New Brunswick
State
NJ
Location Details
Pre-employment Screenings
All offers of employment are contingent upon successful completion of all pre-employment screenings.
Immunization Requirements
Under Policy 100.3.1 Immunization Policy for Covered Individuals, if employment will commence during Flu Season, Rutgers University may require certain prospective employees to provide proof that they are vaccinated against Seasonal Influenza for the current Flu Season, unless the University has granted the individual a medical or religious exemption. Additional infection control and safety policies may apply. Prospective employees should speak with their hiring manager to determine which policies apply to the role or position for which they are applying. Failure to provide proof of vaccination for any required vaccines or obtain a medical or religious exemption from the University will result in rescission of a candidate's offer of employment or disciplinary action up to and including termination.
Equal Employment Opportunity Statement
It is university policy to provide equal employment opportunity to all its employees and applicants for employment regardless of their race, creed, color, national origin, age, ancestry, nationality, marital or domestic partnership or civil union status, sex, pregnancy, gender identity or expression, disability status, liability for military service, protected veteran status, affectional or sexual orientation, atypical cellular or blood trait, genetic information (including the refusal to submit to genetic testing), or any other category protected by law. As an institution, we encourage all qualified applicants to apply. For additional information please see the Non-Discrimination Statement at the following web address: http://uhr.rutgers.edu/non-discrimination-statement

What Rutgers University employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply