ZipRecruiter

Log In

1

Information Security Risk Officer Jobs (NOW HIRING)

next page

Showing results 1-20

All JobsInformation Security Risk Officer Jobs

Information Security Risk Officer information

See salary details

$29.5K

$94.9K

$170.5K

How much do information security risk officer jobs pay per year?

As of Jun 26, 2026, the average yearly pay for information security risk officer in the United States is $94,926.00, according to ZipRecruiter salary data. Most workers in this role earn between $49,500.00 and $127,500.00 per year, depending on experience, location, and employer.

How much does a CISO get paid?

Chief Information Security Officers (CISOs) typically earn between $150,000 and $300,000 annually, depending on the size of the organization, industry, and location. Experienced CISOs with certifications like CISSP or CISM and strong leadership skills can earn higher salaries, often supplemented with bonuses and stock options.

Can you make $500,000 a year in cyber security?

Information Security Risk Officers typically earn salaries ranging from $100,000 to $200,000 annually, depending on experience, certifications, and location. Reaching a $500,000 annual salary usually requires senior roles such as Chief Information Security Officer (CISO) or executive-level positions, which involve strategic leadership, extensive experience, and often additional compensation like bonuses or stock options.

Is SOC an entry level job?

A Security Operations Center (SOC) analyst role is typically not entry-level and usually requires some experience in cybersecurity, network monitoring, or related fields. Entry-level positions in cybersecurity may include roles like SOC analyst I or security technician, but higher-tier SOC roles often demand certifications such as CompTIA Security+ or Certified SOC Analyst (CSA) and familiarity with security tools and incident response processes.

What are the key skills and qualifications needed to thrive as an Information Security Risk Officer, and why are they important?

To thrive as an Information Security Risk Officer, you need a strong background in cybersecurity principles, risk management frameworks, and typically a degree in information technology or a related field. Familiarity with technical tools such as risk assessment software, SIEM systems, and certifications like CISSP or CISM is often required. Strong analytical thinking, attention to detail, and effective communication skills are crucial for translating complex risks to stakeholders and driving organizational change. These skills are vital for identifying, assessing, and mitigating security threats, ensuring the organization's information assets remain protected and compliant.

What does an Information Security Risk Officer do?

An Information Security Risk Officer is responsible for identifying, assessing, and mitigating risks that could threaten an organization's information systems and data. They develop and implement risk management strategies, conduct security assessments, and help ensure compliance with relevant laws and regulations. Their role often involves coordinating with other departments to promote security best practices and preparing reports for senior management on potential threats and risk mitigation efforts.

What is the difference between Information Security Risk Officer vs Cybersecurity Analyst?

AspectInformation Security Risk OfficerCybersecurity Analyst
CertificationsISO 27001 Lead Implementer, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentRisk management teams, compliance departmentsSecurity operations centers, incident response teams
Employer & Industry UsageFinancial, healthcare, government sectorsIT firms, cybersecurity service providers
Primary FocusAssessing and managing security risks, complianceDetecting and responding to security threats

The main difference is that an Information Security Risk Officer focuses on identifying, assessing, and managing security risks and ensuring compliance, while a Cybersecurity Analyst primarily detects, investigates, and responds to security threats. Both roles require relevant certifications and work in security-focused environments, but their core responsibilities differ in scope and focus.

What are some common challenges Information Security Risk Officers face when balancing security requirements with business objectives?

Information Security Risk Officers often encounter the challenge of aligning robust security controls with the organization's need for operational efficiency and innovation. Balancing compliance and risk mitigation with the urgency of business initiatives requires strong communication and negotiation skills, as well as a deep understanding of both technical risks and business goals. Successfully navigating these challenges involves collaborating closely with IT, legal, and business stakeholders to develop practical solutions that protect assets without hindering productivity or growth.

Is CISO a high paying job?

A Chief Information Security Officer (CISO) is typically a high-paying executive role in cybersecurity, with salaries often exceeding six figures depending on the organization size and industry. The role requires extensive experience, leadership skills, and often relevant certifications like CISSP or CISM.
More about Information Security Risk Officer jobs
What cities are hiring for Information Security Risk Officer jobs? Cities with the most Information Security Risk Officer job openings:
What job categories do people searching Information Security Risk Officer jobs look for? The top searched job categories for Information Security Risk Officer jobs are:
Information Security Risk Officer jobs near you
Infographic showing various Information Security Risk Officer job openings in the United States as of June 2026, with employment types broken down into 93% Full Time, and 7% Part Time. Highlights an 96% Physical, 1% Hybrid, and 3% Remote job distribution, with an average salary of $94,926 per year, or $45.6 per hour.
Chief Information Security Officer

Chief Information Security Officer

City of New York

Manhattan, NY • On-site

Full-time

Posted 7 days ago

City Of New York rating

7.1

Company rating: 7.1 out of 10

Based on 77 frontline employees who took The Breakroom Quiz

498th of 663 rated public administrative organizations

Job description

Job Description

About TRS:
Since 1917, the Teachers' Retirement System of the City of New York (TRS) has been securing better futures for NYC educators. With a pension fund valued at approximately $123 billion, TRS serves over 274,000 members, providing them with retirement, disability, and death benefit services.
At TRS, we seek dedicated professionals who are passionate about their work and committed to excellence. We pride ourselves on our member-centric culture, focused on delivering outstanding service and support to our members.
Position Summary:
TRS is seeking a seasoned and strategic Chief Information Security Officer (CISO) to lead and elevate it's Information Security and Business Continuity programs. This is a critical leadership role within a well-established discipline; continuity and forward-thinking guidance are essential to ensuring ongoing protection of TRS' mission-critical functions.
The ideal candidate is a versatile, decisive leader with deep expertise across all areas of information security, including policy development, risk assessments, regulatory audits, incident response, training, and third-party/vendor risk management. The CISO will collaborate closely with IT and business leaders and must be comfortable navigating both technical and strategic responsibilities.
Reporting to the Chief Risk Officer, this position leads a small, high-performing team within the Risk Management Department and requires a hands-on leader who can make risk-informed decisions under pressure while continuously maturing the agency's security posture.
Key Responsibilities:
- Lead and continuously enhance the agency's Information Security and Business Continuity programs, ensuring strategic alignment with IT architecture, security engineering, and operational frameworks in accordance with NIST, ISO, and applicable state regulatory standards.
- Serve as a technical and trusted advisor on Information Security and Business Continuity to IT, Legal, and business units, embedding security and resilience into systems, contracts, and daily operations.
- Participate in technical planning and understand impact to organization.
- Conduct and oversee cybersecurity risk assessments, vendor risk reviews, and responses to internal and external audits.
- Lead and coordinate the end-to-end lifecycle of security incidents, from initial detection and investigation to containment, forensics, and lessons-learned reporting. Serve as the technical escalation point for complex incidents.
- Maintain, test, improve, continuously improve business continuity and disaster recovery plans across critical operations, including data backup, replication strategies, and system failover procedures.
- Supervise and mentor a small, high impact team; ensuring coverage for both strategic planning and monitoring.
- Design and enforce technical policies, security configuration baselines, and automated compliance monitoring across hybrid infrastructure (on-premises and cloud environments).
- Design and lead a targeted security awareness program, promoting ownership and accountability across the organization.
- Monitor, track, and report on key risk indicators (KRIs), threat trends, control effectiveness, and program maturity metrics.
- Partner with auditors, regulators and external partners, to ensure compliance and manage remediation efforts.
- Engage with third-party vendors and service providers to assess security status and identify vulnerabilities.
- Stay current with emerging cybersecurity, privacy, and resilience trends, proactively integrating best practices and evolving threats into the agency's strategic roadmap.
- Perform additional related duties as assigned by the Chief Risk Officer.
ADMINISTRATIVE RETIREMENT BENE - 82986

Qualifications

1. A baccalaureate degree from an accredited college or university including or supplemented by 12 credits in mathematics, statistics, accounting, and/or actuarial science and four years of satisfactory full-time experience implementing the provisions of a retirement plan involving the use of mathematical, statistical, actuarial or accounting computations, 18 months of which must have been in an administrative, managerial or executive capacity or supervising professionals implementing the provisions of a retirement plan involving the use of mathematical, statistical, actuarial or accounting computations; or
2. An associate degree or 60 credits from an accredited college or university, including or supplemented by 12 credits in mathematics, statistics, accounting and/or actuarial science and six years of satisfactory full-time experience as indicated in "1"; or
3. Education and/or experience equivalent to "1" or "2" above. However, all candidates must have 60 credits from an accredited college or university, including or supplemented by 12 credits in mathematics, statistics, accounting and/or actuarial science and the 18 months of experience in a supervisory, administrative, managerial or executive capacity as described in "1" above.

Additional Information

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.

What City Of New York employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply