The ideal candidate brings advanced education in information systems or cybersecurity, extensive ... Security & Risk Platform Integration and Automation Architect and maintain integrations across ...
The ideal candidate brings advanced education in information systems or cybersecurity, extensive ... Security & Risk Platform Integration and Automation Architect and maintain integrations across ...
Senior Risk and Compliance Analyst
$96K - $148K/yr
The Senior Risk and Compliance Analyst is a key member of the IT Governance, Risk, and Compliance ... This role partners with stakeholders across IT, Information Security, Procurement, Legal, OT, and ...
New
Senior Risk and Compliance Analyst
$96K - $148K/yr
The Senior Risk and Compliance Analyst is a key member of the IT Governance, Risk, and Compliance ... This role partners with stakeholders across IT, Information Security, Procurement, Legal, OT, and ...
New
The ideal candidate brings advanced education in information systems or cybersecurity, extensive ... strategies Security & Risk Platform Integration and Automation • Architect and maintain ...
The ideal candidate brings advanced education in information systems or cybersecurity, extensive ... strategies Security & Risk Platform Integration and Automation • Architect and maintain ...
Principal Cybersecurity Analyst - Risk Mgmt & AI Security
Houston, TX · On-site +1
$123K/yr
The ideal candidate brings advanced education in information systems or cybersecurity, extensive ... strategies Security & Risk Platform Integration and Automation • Architect and maintain ...
Principal Cybersecurity Analyst - Risk Mgmt & AI Security
Houston, TX · On-site +1
$123K/yr
The ideal candidate brings advanced education in information systems or cybersecurity, extensive ... strategies Security & Risk Platform Integration and Automation • Architect and maintain ...
The ideal candidate brings advanced education in information systems or cybersecurity, extensive ... strategies Security & Risk Platform Integration and Automation • Architect and maintain ...
The ideal candidate brings advanced education in information systems or cybersecurity, extensive ... strategies Security & Risk Platform Integration and Automation • Architect and maintain ...
Senior Third-Party Cyber Security Risk Analyst
Plano, TX · On-site
$95K - $123K/yr
Review and analyze independent assurance artifacts, including SOC 1, SOC 2, ISO 27001 ... Experience in Information Security, Risk Management, Information Technology, or related disciplines.
Senior Third-Party Cyber Security Risk Analyst
Plano, TX · On-site
$95K - $123K/yr
Review and analyze independent assurance artifacts, including SOC 1, SOC 2, ISO 27001 ... Experience in Information Security, Risk Management, Information Technology, or related disciplines.
Risk Analyst
Corinth, TX · On-site
Position Summary Responsible for supporting DATCU's risk management and security efforts by ... Monitor KRIs, analyze trends, and prepare risk reports and recommendations for management.
Risk Analyst
Corinth, TX · On-site
Position Summary Responsible for supporting DATCU's risk management and security efforts by ... Monitor KRIs, analyze trends, and prepare risk reports and recommendations for management.
Conducts security and fraud assessments, risk analyses and assesses contingency plans for to verify ... Interfaces with clients on all inquiries related to Information and IT Security and fraud ...
Conducts security and fraud assessments, risk analyses and assesses contingency plans for to verify ... Interfaces with clients on all inquiries related to Information and IT Security and fraud ...
Conducts security and fraud assessments, risk analyses and assesses contingency plans for to verify ... Interfaces with clients on all inquiries related to Information and IT Security and fraud ...
Conducts security and fraud assessments, risk analyses and assesses contingency plans for to verify ... Interfaces with clients on all inquiries related to Information and IT Security and fraud ...
Risk Analyst
Corinth, TX · Hybrid
Position Summary Responsible for supporting DATCU's risk management and security efforts by ... Monitor KRIs, analyze trends, and prepare risk reports and recommendations for management.
Risk Analyst
Corinth, TX · Hybrid
Position Summary Responsible for supporting DATCU's risk management and security efforts by ... Monitor KRIs, analyze trends, and prepare risk reports and recommendations for management.
Wargame Facilitator - Senior Information Security Analyst
San Antonio, TX · Hybrid
$120K - $196K/yr
Interpret advanced data aggregation and data of information security risk exposure * Develop and ... Required Qualifications: * 4+ years of Information Security Analysis experience, or equivalent ...
Wargame Facilitator - Senior Information Security Analyst
San Antonio, TX · Hybrid
$120K - $196K/yr
Interpret advanced data aggregation and data of information security risk exposure * Develop and ... Required Qualifications: * 4+ years of Information Security Analysis experience, or equivalent ...
Wargame Facilitator - Senior Information Security Analyst
Irving, TX · Hybrid
$120K - $196K/yr
Interpret advanced data aggregation and data of information security risk exposure * Develop and ... Required Qualifications: * 4+ years of Information Security Analysis experience, or equivalent ...
Wargame Facilitator - Senior Information Security Analyst
Irving, TX · Hybrid
$120K - $196K/yr
Interpret advanced data aggregation and data of information security risk exposure * Develop and ... Required Qualifications: * 4+ years of Information Security Analysis experience, or equivalent ...
GRC Security Analyst Location ... Dallas,TX(Onsite) JD: * 8+ years of experience in Information Security, GRC, Risk, or Compliance.
New
GRC Security Analyst Location ... Dallas,TX(Onsite) JD: * 8+ years of experience in Information Security, GRC, Risk, or Compliance.
New
The Senior GRC Analyst is an experienced individual contributor within the IT Security function ... This role independently executes information security risk assessments, control oversight, and ...
The Senior GRC Analyst is an experienced individual contributor within the IT Security function ... This role independently executes information security risk assessments, control oversight, and ...
Information Security Analyst
Austin, TX · On-site
They are seeking an Information Security Analyst to perform risk assessments, monitor security systems, and provide technical consulting on security requirements. Responsibilities : • Performs risk ...
Information Security Analyst
Austin, TX · On-site
They are seeking an Information Security Analyst to perform risk assessments, monitor security systems, and provide technical consulting on security requirements. Responsibilities : • Performs risk ...
Security Manager
Dallas, TX · On-site
$150K - $165K/yr
Information Security Analyst (Senior) * Security Risk & Compliance Lead * IT Risk Manager
Quick apply
Security Manager
Dallas, TX · On-site
$150K - $165K/yr
Information Security Analyst (Senior) * Security Risk & Compliance Lead * IT Risk Manager
Information Security Analyst
Irving, TX · On-site
Job : Information Security Analyst Location- Irving, TX The role will be in IAM Governance ... risk management, or other industry experience within IAM or Information Security?
Information Security Analyst
Irving, TX · On-site
Job : Information Security Analyst Location- Irving, TX The role will be in IAM Governance ... risk management, or other industry experience within IAM or Information Security?
... Risk Analyst, Cyber Risk Manager, Security Architect, Cybersecurity Engineer, System Security Engineer, etc. DEGREE (Level Desired) Bachelor's Degree DEGREE (Focus) Cybersecurity, Information ...
... Risk Analyst, Cyber Risk Manager, Security Architect, Cybersecurity Engineer, System Security Engineer, etc. DEGREE (Level Desired) Bachelor's Degree DEGREE (Focus) Cybersecurity, Information ...
Leveraging more than 15 years of experience in information security, risk management, and program delivery, this individual possesses the vision, subject matter expertise, and executive presence to ...
Quick apply
Leveraging more than 15 years of experience in information security, risk management, and program delivery, this individual possesses the vision, subject matter expertise, and executive presence to ...
The Information Security Analyst position will be responsible for providing technical and business ... Support vulnerability management activities, including scanning, risk-based prioritization, and ...
The Information Security Analyst position will be responsible for providing technical and business ... Support vulnerability management activities, including scanning, risk-based prioritization, and ...
Information Security Risk Analyst information
See Texas salary details
$29.79 - $33.47
6% of jobs
$33.47 - $37.16
5% of jobs
$37.16 - $40.84
8% of jobs
$42.59 is the 25th percentile. Wages below this are outliers.
$40.84 - $44.53
11% of jobs
$44.53 - $48.21
12% of jobs
The median wage is $51.67 / hr.
$48.21 - $51.90
8% of jobs
$51.90 - $55.58
7% of jobs
$55.58 - $59.27
9% of jobs
$60.94 is the 75th percentile. Wages above this are outliers.
$59.27 - $62.95
17% of jobs
$62.95 - $66.64
8% of jobs
$66.64 - $70.32
7% of jobs
$29
$54
$70
How much do information security risk analyst jobs pay per hour?
What is the difference between Information Security Risk Analyst vs Cybersecurity Analyst?
| Aspect | Information Security Risk Analyst | Cybersecurity Analyst |
|---|---|---|
| Certifications | ISO 27001, CISSP, CISA | CompTIA Security+, CEH, CISSP |
| Work Environment | Risk assessment teams, compliance departments | Security operations centers, incident response teams |
| Employer & Industry Usage | Financial, healthcare, government sectors | Tech companies, cybersecurity firms, enterprises |
While both roles focus on protecting information assets, the Information Security Risk Analyst primarily assesses and manages risks related to information security policies and compliance. In contrast, the Cybersecurity Analyst actively monitors security systems, responds to threats, and handles incidents. Understanding these differences helps organizations assign the right responsibilities and professionals to safeguard their digital assets.
What are the key skills and qualifications needed to thrive as an information security risk analyst, and why are they important?
What is an information security risk analyst?
What does an information security risk analyst do?
As an information security risk analyst, your job is to help assess each potential threat and determine whether or not your current network system suffers from vulnerability to that threat. In this IT role, you may monitor network activity, help implement and manage safety protocols, and research emerging threats to help determine the best response to them. Information security risk analysts often work with many other IT personnel at the same company to manage security needs and, somewhat unusually for an IT role, may also collaborate with outside experts and volunteers to find the best way to counter a particular threat. This is an extremely collaborative position, so the ability to work well with other people, including those you may be meeting for the first time, is essential to your success.
How does an information security risk analyst typically collaborate with other departments to address security risks?
- Temporary Third Party Risk Analyst
- Information Security Governance
- Entry Level Ceh
- Trainee Soc Analyst Google
- Senior Risk Analyst
- Work From Home Security Risk Analyst
- Urgently Hiring Information Security Compliance Analyst
- Entry Level Third Party Risk Analyst
- Senior Grc Analyst
- Night Shift Vulnerability Management Analyst

Full-time
Medical, Dental, Vision, Life, Retirement, PTO
This job post has expired today. Applications are no longer accepted.
MD Anderson Cancer Center rating
8.4
Based on 170 frontline employees who took The Breakroom Quiz
24th of 887 rated healthcare providers
Job description
The University of Texas MD Anderson Cancer Center is seeking a highly skilled Principal Cybersecurity Analyst to serve as a technical authority within its Cybersecurity department. The Principal Cybersecurity Analyst plays a critical role in shaping and advancing enterprise-wide governance, risk, and compliance (GRC) programs, with expanded accountability for emerging AI security and governance initiatives. This role operates at a strategic and architectural level while also ensuring operational effectiveness across cybersecurity risk management practices.
The Principal Cybersecurity Analyst contributes directly to safeguarding sensitive data, maintaining regulatory compliance, and strengthening the organization's security posture through innovative, data-driven risk management and governance strategies. The Principal Cybersecurity Analyst serves as a trusted advisor, architect, and leader within the cybersecurity function. The ideal candidate brings advanced education in information systems or cybersecurity, extensive experience leading enterprise risk management or GRC programs, and strong knowledge of frameworks such as NIST, HIPAA, and HITRUST.
Preferred candidates will also have hands-on experience assessing AI/ML risk, strong executive communication skills, and certifications such as CISSP, CISM, or PMP. Minimum $123,000 - Midpoint $154,000 - Maximum $185,000 Work Location: Remote 100% Why Us. At UT MD Anderson, the Principal Cybersecurity Analyst plays an essential role in advancing cybersecurity innovation in a mission-driven healthcare environment.
This position offers the opportunity to shape enterprise risk strategy, influence executive decision-making, and lead emerging AI governance practices, all while supporting an organization dedicated to saving lives. Employees benefit from a collaborative culture, professional development opportunities, and a strong commitment to work-life balance. Employer-paid medical coverage starting day one for employees working 30+ hours/week, plus optional group dental, vision, life, AD&D, and disability insurance.
Accruals for PTO and Extended Illness Bank, plus paid holidays, wellness, childcare, and other leave options. Tuition Assistance Program after six months of service and access to extensive wellness, fitness, and employee resource groups. Defined-benefit pension through the Teachers Retirement System, voluntary retirement plans, and employer-paid life and reduced salary protection programs.
Responsibilities Governance, Risk & Compliance (GRC) Architecture & Risk Management Program Leadership Serve as principal architect and subject matter expert for enterprise GRC and cybersecurity risk programs Define and maintain risk assessment methodologies, control frameworks, and risk scoring models Establish workflows across development, staging, and production environments Develop SOPs, roles, segregation of duties, and change management processes Lead design and execution of enterprise risk management strategies Security & Risk Platform Integration and Automation Architect and maintain integrations across Archer, Tenable, ServiceNow, Microsoft Configuration Manager (SCCM/MECM), and Medigate Design automated workflows consolidating asset, vulnerability, and risk data Enable enterprise-wide risk visibility and reporting through data-driven systems Ensure data quality, reconciliation, and interoperability across platforms and CMDB Regulatory & Compliance Framework Management Apply frameworks including NIST CSF, NIST 800-53, HIPAA, and HITRUST Conduct control mapping, gap assessments, and compliance reporting Advise stakeholders on remediation strategies and regulatory requirements Align institutional policies with regulatory and accreditation standards AI Security & Governance Establish and mature AI security and governance programs Develop AI risk assessment criteria and governance standards Align controls to NIST AI Risk Management Framework and institutional policies Evaluate AI/ML tools and vendors for data protection and compliance risks Partner with data governance, privacy, and legal teams on AI initiatives Strategic Risk Visioning, Assessment & Executive Advisory Develop multi-year roadmaps, milestones, and resource plans Lead enterprise and project-level risk assessments Translate technical findings into executive-level reporting and dashboards Advise leadership on risk posture and investment prioritization Provide technical leadership and mentorship across teams EDUCATION Required: Bachelor's Degree Computer Information Systems, Business Information Systems, Computer Science or related field. Preferred: Master's Degree Information Security, Computer Science or related field WORK EXPERIENCE Required: 7 years In information security and/or cybersecurity experience including multiple security domains, to include two years lead/supervisory experience. May substitute required education degree with additional years of equivalent experience on a one to one basis.
Preferred: At least 7-8 years of progressive cybersecurity experience, hands-on risk management (risk assessment, risk register ownership, control evaluation, or risk quantification), led or owned a security risk management program or framework implementation (e.g., NIST RMF/CSF, ISO 27005, FAIR, or equivalent), direct hands-on experience assessing the security or risk posture of AI/ML systems or GenAI deployments, ability to translate technical risk into business-level language for executive and governance audiences (e.g., briefing a CISO, risk committee, or board), experience using Archer, excellent communication skills, risk management, and cybersecurity framework is a must. LICENSES AND CERTIFICATIONS Preferred: CISSP - Cert IS Security Professional Issued by the International Information Systems Security Certification Consortium ((ISC). Preferred: CISM - Cert Info Security Manager Issued by Information Systems Audit and Control Association (ISACA)
Preferred: PMP - Project Mgt Professional Issued by the Project Management Institute (PMI). Preferred: Other applicable security industry certifications. The University of Texas MD Anderson Cancer Center offers excellent benefits, including medical, dental, paid time off, retirement, tuition benefits, educational opportunities, and individual and team recognition.
This position may be responsible for maintaining the security and integrity of critical infrastructure, as defined in Section 113.001(2) of the Texas Business and Commerce Code and therefore may require routine reviews and screening. The ability to satisfy and maintain all requirements necessary to ensure the continued security and integrity of such infrastructure is a condition of hire and continued employment. It is the policy of The University of Texas MD Anderson Cancer Center to provide equal employment opportunity without regard to race, color, religion, age, national origin, sex, gender, sexual orientation, gender identity/expression, disability, protected veteran status, genetic information, or any other basis protected by institutional policy or by federal, state, or local laws unless such distinction is required by law.http://www.mdanderson.org/about-us/legal-and-policy/legal-statements/eeo-affirmative-action.html Additional Information Requisition ID: 181706 Employment Status: Full-Time Employee Status: Regular Work Week: Days Minimum Salary: US Dollar (USD) 123,000 Midpoint Salary: US Dollar (USD) 154,000 Maximum Salary : US Dollar (USD) 185,000 FLSA: exempt and not eligible for overtime pay Fund Type: Hard Work Location: Remote (within Texas only) Pivotal Position: Yes Referral Bonus Available?: Yes Relocation Assistance Available?: Yes #LI-Remote Apply
What MD Anderson Cancer Center employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About MD Anderson Cancer Center
Sourced by ZipRecruiter
Industry
Health care and social assistance
Company size
10,000+ Employees
Headquarters location
Houston, TX, US
Year founded
1944