ZipRecruiter

Log In

1

Manager Security Risk Assessment Jobs (NOW HIRING)

Meta

Director, Security Risk Program

Washington, DC · On-site

$227K - $287K/yr

The program delivers Global Security Risk Assessments (regulatory and commercial), Capability ... Minimum Qualifications • 15+ years of experience in security risk management, technology risk ...

Meta

Director, Security Risk Program

Washington, DC

$227K/yr

The program delivers GlobalSecurity Risk Assessments (regulatory and commercial), Capability ... Drive cross-domain unification with Privacy Risk Management, Integrity Risk Management, Legal ...

Customer Value Partners

Risk Manager

Rockville, MD · On-site

Conducting an enterprise risk assessment and developing an agency Information Security Risk ... Providing risk management guidance to the agency offices for A&A activities as required, ensuring ...

Customer Value Partners

Risk Manager

Rockville, MD · On-site

Conducting an enterprise risk assessment and developing an agency Information Security Risk ... Providing risk management guidance to the agency offices for A&A activities as required, ensuring ...

next page

Showing results 1-20

All JobsFinance And Insurance JobsFinancial Services JobsRisk Management Analyst JobsManager Security Risk Assessment Jobs

Manager Security Risk Assessment information

See salary details

$51.5K

$111.6K

$170K

How much do manager security risk assessment jobs pay per year?

As of Sep 10, 2026, the average yearly pay for manager security risk assessment in the United States is $111,556.00, according to ZipRecruiter salary data. Most workers in this role earn between $90,000.00 and $129,000.00 per year, depending on experience, location, and employer.

What is the difference between Manager Security Risk Assessment vs Security Analyst?

AspectManager Security Risk AssessmentSecurity Analyst
CertificationsCISSP, CISM, CRISCCISSP, Security+
Work EnvironmentOversees security programs, manages teamsAnalyzes security threats, monitors systems
Industry UsageCommon in organizations with complex security needsWidely used across various industries for threat detection

The Manager Security Risk Assessment focuses on leading security risk evaluations, managing teams, and developing security strategies. In contrast, a Security Analyst primarily monitors security systems, analyzes threats, and responds to incidents. Both roles require relevant certifications and work within the cybersecurity industry, but their responsibilities differ in scope and focus.

What cities are hiring for Manager Security Risk Assessment jobs?

Cities with the most Manager Security Risk Assessment job openings:

What are the most commonly searched types of Security Risk Assessment jobs?

The most popular types of Security Risk Assessment jobs are:

What states have the most Manager Security Risk Assessment jobs?

States with the most job openings for Manager Security Risk Assessment jobs include:

What are popular job titles related to Manager Security Risk Assessment jobs?

For Manager Security Risk Assessment jobs, the most frequently searched job titles are:

Manager Security Risk Assessment jobs near you

Information Security Risk Assessment Sr. Analyst

Remote

Rootshell Enterprise Technologies, Inc.
11 - 50 employees
Learn more about Rootshell Enterprise Technologies, Inc.external

Full-time

Re-posted 25 days ago

Job description

Hello All,
Greetings from Rootshell Inc.
Rootshell Enterprise Technologies Inc. is a recognized provider of professional IT Consulting services in the US. We are actively seeking Information Security Risk Assessment Sr. Analyst for one of our client, Please share your resume with current location & full contact info
Role: Information Security Risk Assessment Sr. Analyst
Location: San Jose or Remote
Job Summary:
Key Responsibilities:
• Conduct security risk assessments to identify, score and document potential risks from
threats and vulnerabilities within the organization's infrastructure and applications.
• Perform control effectiveness assessment by collaborating with cross-functional teams to
understand technical implementations and assess control strength
• Communicate identified security risks and their potential impact to stakeholders,
including technical and non-technical audiences.
• Track and report on the status of risk remediation efforts, ensuring timely resolution and
compliance with organizational policies.
• Maintain security risk register and ensure timely updates of the risk register
• Contribute to performing risk aggregation and risk analysis to identify top risks and areas
of focus/improvement for prioritization
• Contribute to developing detailed reports and presentations on risk assessments,
including identified aggregated top risks, risk treatment progress, trending and
escalation. Ensure these reports are understandable to technical and non-technical
stakeholders, including senior management
• Demonstrate a process-oriented, results-driven approach to security risk engineering,
employing effective problem-solving and communication skills to serve as a subject
matter expert and trusted advisor
• Actively contributes to the administration, maintenance and process improvements of the
GRC risk assessment program
• Performs other job duties as required
We'd love to chat if you have:
• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5+ years of experience in security risk assessment, with strong background in
cybersecurity and risk management, with hands-on working knowledge and experience
in risk management frameworks such as NIST RMF, FAIR, and OWASP
• Strong technical knowledge of security controls, including but not limited to access
controls, encryption, network security, and vulnerability management.
• Demonstrated experience working within a GRC framework, with an understanding of
regulatory and compliance requirements (e.g., PCI DSS, SOC).
• Proven ability to work collaboratively with engineering teams to assess and mitigate
security risks.
• Experience with security risk remediation programs, including technical implementation
and compliance considerations.
• Strong analytical and problem-solving skills, with attention to detail and accuracy.
• Strong collaboration skills, with experience working cross-functionally with IT,
Engineering, and other stakeholders.
• Excellent communication skills, capable of translating technical concepts into actionable
insights for both technical and non-technical stakeholders.
• Experience in identifying process improvements and enhancing operational efficiencies
within security programs.
• Experience with GRC Risk Management tool including tool implementation will be plus
Preferred Skills:
• Experience with security assessment tools and methodologies.
• Knowledge of cloud security best practices and technologies (e.g., AWS, Azure, GCP).
• Strong project management skills with the ability to prioritize tasks and manage multiple
projects simultaneously.
• Certifications like PMP, CISSP, or CISM are a plus but not required
With regards
Naveen | Talent Acquisition
Rootshell Enterprise Technologies Inc.
Naveen@rootshellinc.com | www.rootshellinc.com

Apply