As Alcoa's Cybersecurity Risk Management program continues to mature, the Analyst plays a critical role in shaping and enhancing program capabilities. About the Role: * Contribute to the development ...
As Alcoa's Cybersecurity Risk Management program continues to mature, the Analyst plays a critical role in shaping and enhancing program capabilities. About the Role: * Contribute to the development ...
As Alcoa's Cybersecurity Risk Management program continues to mature, the Analyst plays a critical role in shaping and enhancing program capabilities. About the Role: * Contribute to the development ...
As Alcoa's Cybersecurity Risk Management program continues to mature, the Analyst plays a critical role in shaping and enhancing program capabilities. About the Role: * Contribute to the development ...
As Alcoa's Cybersecurity Risk Management program continues to mature, the Analyst plays a critical role in shaping and enhancing program capabilities. About the Role: * Contribute to the development ...
As Alcoa's Cybersecurity Risk Management program continues to mature, the Analyst plays a critical role in shaping and enhancing program capabilities. About the Role: * Contribute to the development ...
Cyber Security Risk Analyst Work Location: Required onsite work at the client location at Scott Air ... Management Framework (RMF) and Vulnerability Management to on-premises and Cloud networks.
Cyber Security Risk Analyst Work Location: Required onsite work at the client location at Scott Air ... Management Framework (RMF) and Vulnerability Management to on-premises and Cloud networks.
Cyber Security Risk Analyst
Belleville, IL · On-site
$115K - $125K/yr
... Cyber Security Risk Analyst Work Location: Required onsite work at the client location at Scott ... Management Framework (RMF) and Vulnerability Management to on-premises and Cloud networks.
Cyber Security Risk Analyst
Belleville, IL · On-site
$115K - $125K/yr
... Cyber Security Risk Analyst Work Location: Required onsite work at the client location at Scott ... Management Framework (RMF) and Vulnerability Management to on-premises and Cloud networks.
Cybersecurity Risk Analyst
Mclean, VA · On-site
$100K - $150K/yr
Cybersecurity Risk Analyst Salary Range: $100,000 - $150,000 Clearance: TS/SCI + CI Poly Location ... Experience with RMF, ATO, NIST SP 800-53, continuous monitoring, vulnerability management, or SOC ...
Cybersecurity Risk Analyst
Mclean, VA · On-site
$100K - $150K/yr
Cybersecurity Risk Analyst Salary Range: $100,000 - $150,000 Clearance: TS/SCI + CI Poly Location ... Experience with RMF, ATO, NIST SP 800-53, continuous monitoring, vulnerability management, or SOC ...
Cyber Security Risk Analyst
New York, NY · On-site
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Manage relationship with the business unit assigned. * Embed within the development squad to ...
Cyber Security Risk Analyst
New York, NY · On-site
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Manage relationship with the business unit assigned. * Embed within the development squad to ...
Cyber Security Risk Analyst
New York, NY · On-site
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Manage relationship with the business unit assigned. * Embed within the development squad to ...
Cyber Security Risk Analyst
New York, NY · On-site
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Manage relationship with the business unit assigned. * Embed within the development squad to ...
Be Seen First
Cybersecurity Risk Analyst (REMOTE)
Portland, OR · Remote
$90K - $100K/yr
The analyst works within a Risk Management team and is expected to collaborate with Federal and ... Experience with Cybersecurity, risk management, or risk assessment for complex systems * Experience ...
Quick apply
Be Seen First
Cybersecurity Risk Analyst (REMOTE)
Portland, OR · Remote
$90K - $100K/yr
The analyst works within a Risk Management team and is expected to collaborate with Federal and ... Experience with Cybersecurity, risk management, or risk assessment for complex systems * Experience ...
Cybersecurity Risk Analyst (REMOTE)
Columbus, OH · Remote
$90K - $100K/yr
The analyst works within a Risk Management team and is expected to collaborate with Federal and ... Experience with Cybersecurity, risk management, or risk assessment for complex systems * Experience ...
Quick apply
Cybersecurity Risk Analyst (REMOTE)
Columbus, OH · Remote
$90K - $100K/yr
The analyst works within a Risk Management team and is expected to collaborate with Federal and ... Experience with Cybersecurity, risk management, or risk assessment for complex systems * Experience ...
Cyber Security Risk Analyst
New York, NY · On-site
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Manage relationship with the business unit assigned. * Embed within the development squad to ...
Cyber Security Risk Analyst
New York, NY · On-site
The Cyber Security Risk Analyst will be responsible for risk assessments, Cloud mitigations ... Manage relationship with the business unit assigned. * Embed within the development squad to ...
Cybersecurity Risk Analyst (REMOTE)
Orlando, FL · Remote
$90K - $100K/yr
The analyst works within a Risk Management team and is expected to collaborate with Federal and ... Experience with Cybersecurity, risk management, or risk assessment for complex systems * Experience ...
Quick apply
Cybersecurity Risk Analyst (REMOTE)
Orlando, FL · Remote
$90K - $100K/yr
The analyst works within a Risk Management team and is expected to collaborate with Federal and ... Experience with Cybersecurity, risk management, or risk assessment for complex systems * Experience ...
Cybersecurity Risk Analyst (REMOTE)
Dallas, TX · Remote
$90K - $100K/yr
The analyst works within a Risk Management team and is expected to collaborate with Federal and ... Experience with Cybersecurity, risk management, or risk assessment for complex systems * Experience ...
Quick apply
Cybersecurity Risk Analyst (REMOTE)
Dallas, TX · Remote
$90K - $100K/yr
The analyst works within a Risk Management team and is expected to collaborate with Federal and ... Experience with Cybersecurity, risk management, or risk assessment for complex systems * Experience ...
Cyber Security Risk Analyst
Manhattan, NY · On-site
The Cyber Security Risk Analyst will be responsible for conducting risk assessments, managing security application testing, and collaborating with technology teams to ensure compliance and security ...
Cyber Security Risk Analyst
Manhattan, NY · On-site
The Cyber Security Risk Analyst will be responsible for conducting risk assessments, managing security application testing, and collaborating with technology teams to ensure compliance and security ...
Cybersecurity Risk Analyst
Nashville, TN · On-site
Responsibilities Support a Technology Vendor Management program, ensuring technology risk reviews ... Strong analytical skills in conducting due diligence to identify, assess and prioritize vendor ...
Cybersecurity Risk Analyst
Nashville, TN · On-site
Responsibilities Support a Technology Vendor Management program, ensuring technology risk reviews ... Strong analytical skills in conducting due diligence to identify, assess and prioritize vendor ...
Cybersecurity Risk Analyst
Nashville, TN · On-site
Responsibilities Support a Technology Vendor Management program, ensuring technology risk reviews ... Strong analytical skills in conducting due diligence to identify, assess and prioritize vendor ...
Cybersecurity Risk Analyst
Nashville, TN · On-site
Responsibilities Support a Technology Vendor Management program, ensuring technology risk reviews ... Strong analytical skills in conducting due diligence to identify, assess and prioritize vendor ...
Cybersecurity Risk Analyst II
Honolulu, HI · On-site
$66K - $82K/yr
First Hawaiian Bank is seeking a Cybersecurity Risk Analyst II to join our IT Governance & ... Bachelor's degree in computer science, management information systems (MIS), engineering ...
Cybersecurity Risk Analyst II
Honolulu, HI · On-site
$66K - $82K/yr
First Hawaiian Bank is seeking a Cybersecurity Risk Analyst II to join our IT Governance & ... Bachelor's degree in computer science, management information systems (MIS), engineering ...
Cybersecurity Risk Analyst II
Honolulu, HI · On-site
$66K - $82K/yr
First Hawaiian Bank is seeking a Cybersecurity Risk Analyst II to join our IT Governance & ... The role will assist management in the development, implementation, and execution of a measurements ...
Cybersecurity Risk Analyst II
Honolulu, HI · On-site
$66K - $82K/yr
First Hawaiian Bank is seeking a Cybersecurity Risk Analyst II to join our IT Governance & ... The role will assist management in the development, implementation, and execution of a measurements ...
Cybersecurity Risk Analyst IV
Gainesville, FL · On-site
$121K - $127K/yr
Cybersecurity Risk Analyst IV Job no: 540260 Work type: Staff Full-Time Location: Main Campus ... management program, which includes (but is not limited to): * Evaluating and providing ...
Cybersecurity Risk Analyst IV
Gainesville, FL · On-site
$121K - $127K/yr
Cybersecurity Risk Analyst IV Job no: 540260 Work type: Staff Full-Time Location: Main Campus ... management program, which includes (but is not limited to): * Evaluating and providing ...
Senior Program Manager - Cybersecurity Risk Management
Spring, TX · On-site
$130K - $205K/yr
Senior Program Manager - Cybersecurity Risk Management Description - As the world around us becomes more connected and more digital, there are increased opportunities for disruption due to ...
Senior Program Manager - Cybersecurity Risk Management
Spring, TX · On-site
$130K - $205K/yr
Senior Program Manager - Cybersecurity Risk Management Description - As the world around us becomes more connected and more digital, there are increased opportunities for disruption due to ...
Manager Cyber Security Risk Analyst information
See salary details
$43K - $52.7K
1% of jobs
$52.7K - $62.5K
6% of jobs
$62.5K - $72.2K
10% of jobs
$78.8K is the 25th percentile. Wages below this are outliers.
$72.2K - $81.9K
12% of jobs
$81.9K - $91.6K
15% of jobs
The median wage is $95.8K / yr.
$91.6K - $101.4K
15% of jobs
$101.4K - $111.1K
10% of jobs
$115.3K is the 75th percentile. Wages above this are outliers.
$111.1K - $120.8K
16% of jobs
$120.8K - $130.5K
7% of jobs
$130.5K - $140.3K
5% of jobs
$140.3K - $150K
3% of jobs
$43K
$99.4K
$150K
How much do manager cyber security risk analyst jobs pay per year?
What is the difference between Manager Cyber Security Risk Analyst vs Cyber Security Risk Analyst?
| Aspect | Manager Cyber Security Risk Analyst | Cyber Security Risk Analyst |
|---|---|---|
| Certifications | CISSP, CISM, CRISC | CISSP, CISA, CompTIA Security+ |
| Work Environment | Oversees teams, strategic planning | Analyzes risks, implements security measures |
| Employer & Industry Usage | Financial, healthcare, tech firms | Same industries, entry to mid-level roles |
The main difference is that the Manager Cyber Security Risk Analyst leads teams and develops security strategies, while the Cyber Security Risk Analyst focuses on assessing risks and implementing security controls. The manager role involves more leadership and strategic planning, whereas the analyst role is more hands-on with risk assessment tasks.
Full-time
Retirement, PTO
Re-posted 10 days ago
Alcoa rating
8.0
Based on 16 frontline employees who took The Breakroom Quiz
Job description
At Alcoa, you will become an essential part of our purpose: to turn raw potential into real progress. The way we see it, every Alcoan is a work-shaper, team-shaper, idea-shaper & world-shaper.
Alcoa is seeking a Cyber Security Risk Analyst to serve as a key contributor to the cybersecurity risk management program, providing subject matter expertise in identifying, assessing, and managing risks across both Information Technology (IT) and Operational Technology (OT) environments. This role supports informed business decision-making by translating complex technical risks into business and operational impact. The Analyst independently leads risk assessments and partners closely with IT, OT, audit, and senior leaders to ensure cybersecurity risks are understood, documented, mitigated, and monitored in accordance with corporate policies and industry standards.
As Alcoa's Cybersecurity Risk Management program continues to mature, the Analyst plays a critical role in shaping and enhancing program capabilities.
About the Role:
- Contribute to the development, implementation, and continuous improvement of the Cybersecurity Risk Management Program, including frameworks, methodologies, policies, standards, and supporting tools.
- Perform cybersecurity risk assessments across IT, OT, cloud, and third-party environments, including enterprise systems and manufacturing/process control systems (PCS).
- Facilitate risk workshops with technical and business stakeholders to evaluate risks associated with new technologies, projects, and operational changes.
- Serve as a subject matter expert on risk methodology, scoring, and evaluation.
- Maintain and enhance the cybersecurity risk register, including risk scoring, treatment plans, and residual risk tracking.
- Support and guide risk treatment strategies (mitigation, acceptance, transfer, avoidance) and partner with compliance teams to design and implement appropriate controls.
- Translate technical risk findings into clear business and operational impact statements for non-technical audiences and senior leadership.
- Advise leadership on risk exposure, trends, and residual risks, including impacts to business operations and production.
- Define, monitor, and report Key Risk Indicators (KRIs) and emerging threat trends.
- Support audit, regulatory, and compliance activities (e.g., ISO 27001, NIST, SOC) related to cybersecurity risk management.
- Collaborate with Enterprise Risk Management (ERM) and Operations Risk Management teams to ensure alignment and integration of cybersecurity risks into broader risk reporting.
- Build and maintain strong relationships with stakeholders across IT, OT, business units, and risk management functions.
- Continuously monitor evolving cyber threats, emerging technologies, and industry practices to enhance risk management processes and capabilities.
What you can bring to this role:
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Risk Management, or a related discipline; equivalent professional experience may be considered in lieu of a degree.
- 6+ years of experience in cybersecurity, IT risk management, information security, governance, compliance, or IT operations within enterprise environments.
- Demonstrated experience assessing cybersecurity risk across IT and OT environments; experience in manufacturing or industrial organizations preferred.
- Strong knowledge of cybersecurity frameworks and standards (e.g., ISO 27001, NIST CSF, NIST 800-53, CIS Controls, SOX).
- Proven experience executing core GRC activities, including risk assessments, policy and standard development, control validation, audit support, and remediation tracking.
- Expertise in cybersecurity governance, risk assessment, and compliance program implementation.
- Experience using Governance, Risk, and Compliance (GRC) tools and risk reporting dashboards.
- Solid understanding of security principles, including security controls, threat modeling, vulnerability management, and incident risk analysis.
- Excellent written, verbal, and facilitation skills, with the ability to translate complex technical risks into clear business impacts.
- Demonstrated ability to collaborate effectively with cross-functional stakeholders, including technical teams, operations, and senior leadership, while managing multiple priorities in fast-paced environments.
Preferred Qualifications
- Relevant industry certifications such as CISSP, CISM, CRISC, CISA, CGRC, Security+, GRCP, or equivalent.
- Experience with third-party/vendor risk management, regulatory compliance assessments, and security awareness programs.
- Experience supporting global environments and contributing to enterprise-wide security or compliance initiatives.
- Experience supporting audits and assurance activities, including ISO/IEC 27001 certification and SOC report reviews.
- Familiarity with security operations capabilities, including SIEM, log analysis, and event monitoring for compliance and incident response.
- Understanding of enterprise security domains, including cloud security, infrastructure security, and identity and access management (IAM).
- Working knowledge of project management methodologies and practices.
- Experience in metals, mining, manufacturing, or other heavy industrial environments.
What we offer:
- Competitive compensation packages, including pay-for performance variable pay, recognition and rewards programs, and stock-based compensation awards (3-year vesting schedule)
- Flexible spending accounts and generous employer contribution to the HSA
- 401(k), employer match up to 6%, additional employer retirement income contribution (no vesting period), and a non-qualified deferred compensation plan
- 12 paid holidays per year.
- 15 days of paid vacation (pro-rated from hire date).
- Employee Assistance Program (EAP)
#LI-TL2
Employees must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire. Visa sponsorship is not available for this position.
About the Location
Alcoa is an international company with multiple locations and joint ventures across six continents. Wherever you choose to join us, you'll be joining a global team committed to advancing sustainability and delivering excellence and innovation. As industry pioneers, we are redefining what it means to be a sustainable aluminum company, bridging the journey from mines to metal.
We are values led, vision driven and united by our purpose of transforming raw potential into real progress. Our commitments to Inclusion, Diversity & Equity include providing trusting workplaces that are safe, respectful and inclusive of all individuals, free from discrimination, bullying and harassment and that our workplaces reflect the diversity of the communities in which we operate.
As a proud equal opportunity workplace and affirmative action employer, Alcoa is dedicated to providing equal opportunities and equal access to all individuals regardless of a person's gender, age, race, ethnicity, sexual orientation, gender identity, religion, nation of origin, disability, veteran status, language spoken or any other characteristic or status protected by the laws or regulations in the places where we operate.
If you have visited our website in search of information on U.S. employment opportunities or to apply for a position, and you require an accommodation, please contact Alcoa Recruiting via email at gssrecruiting@alcoa.com.
This is a place where you are empowered to do your best work, be your authentic self, and feel a true sense of belonging. Come join us and shape your career!
Your work. Your world. Shape them for the better.
About Alcoa
Sourced by ZipRecruiter
Alcoa is a global industry leader in the production of bauxite, alumina and aluminum, a position enhanced by a portfolio of value-added cast products and select energy assets. Since developing the aluminum industry more than 135 years ago, Alcoa has built a legacy of breakthrough innovations and best practices that have led to efficiency, safety, sustainability and stronger communities wherever we operate.
Industry
Manufacturing
Company size
10,000+ Employees
Headquarters location
Pittsburgh, PA, US
Year founded
1888