ZipRecruiter

Log In

1

Risk Assessment Manager Jobs (NOW HIRING)

Seminolehardrock

Key Responsibilities Governance, Risk Assessment & Management * Lead cybersecurity risk assessments for systems, applications, business processes, and third-party * Drive the identification, analysis ...

Judit Inc

Cybersecurity Risk Assessor

Tallahassee, FL · On-site

Support development of Plans of Action and Milestones (POA&M) and vulnerability management documentation * Populate assessment findings into the engagement's standardized risk assessment tool in ...

Wood Plc

Human Health Risk Assessor

Chelmsford, MA · On-site +1

... Assessment Group Manager. * Collect or compile analytical chemical data from published and unpublished materials. * Enter data into, and extract data from, standard computer programs and risk ...

Crowe LLP

Cyber Security Assessment Manager

Dallas, TX

$109K - $148K/yr

As a Cyber Security Assessment Manager , you will work directly with client stakeholders to ... Infrastructure risk control frameworks, including second line of defense (2LOD) review

New

Crowe LLP

Cyber Security Assessment Manager

Washington, DC · On-site

$125K - $169K/yr

As a Cyber Security Assessment Manager , you will work directly with client stakeholders to ... Infrastructure risk control frameworks, including second line of defense (2LOD) review

New

Crowe LLP

Cyber Security Assessment Manager

Los Angeles, CA · On-site

$119K - $161K/yr

As a Cyber Security Assessment Manager , you will work directly with client stakeholders to ... Infrastructure risk control frameworks, including second line of defense (2LOD) review

New

previous page

Showing results 41-60

All JobsRisk Assessment JobsRisk Assessment Manager Jobs

Risk Assessment Manager information

See salary details

$51.5K

$111.6K

$170K

How much do risk assessment manager jobs pay per year?

As of Aug 14, 2026, the average yearly pay for risk assessment manager in the United States is $111,556.00, according to ZipRecruiter salary data. Most workers in this role earn between $90,000.00 and $129,000.00 per year, depending on experience, location, and employer.

What is the difference between Risk Assessment Manager vs Risk Analyst?

AspectRisk Assessment ManagerRisk Analyst
CredentialsBachelor's degree in risk management, finance, or related field; certifications like CRM or FRM often preferredBachelor's degree in finance, economics, or related field; certifications like FRM or CRM beneficial
Work EnvironmentLeads teams, develops risk strategies, and oversees risk assessments in organizationsAnalyzes data, identifies risks, and supports risk management processes
Industry UsageCommon in finance, insurance, and corporate sectorsWidely used across finance, banking, and consulting firms

The Risk Assessment Manager focuses on leading risk evaluation processes and managing teams, while the Risk Analyst primarily conducts data analysis to identify potential risks. Both roles require similar credentials and are integral to risk management in various industries, but the manager has a broader leadership responsibility.

What is a risk assessment manager?

A Risk Assessment Manager is a professional responsible for identifying, analyzing, and evaluating potential risks that could affect an organization. They develop strategies to minimize or manage these risks, ensuring compliance with relevant laws and policies. Their role often involves working closely with different departments to conduct risk assessments, implement mitigation plans, and monitor ongoing risk factors. Effective communication, analytical skills, and knowledge of industry regulations are key for success in this role.

What are the key skills and qualifications needed to thrive as a risk assessment manager, and why are they important?

To thrive as a Risk Assessment Manager, you need in-depth knowledge of risk analysis methodologies, regulatory compliance, and a relevant degree in finance, business, or a related field. Familiarity with risk management software, data analysis tools like Excel or SAS, and industry certifications such as CRISC or FRM are commonly required. Strong analytical thinking, attention to detail, and effective communication skills help you identify, evaluate, and convey risks to diverse stakeholders. These competencies ensure that organizations can proactively manage potential threats, maintain compliance, and protect their assets.

How does a risk assessment manager typically collaborate with other departments to identify and mitigate potential risks?

Risk Assessment Managers work closely with various departments such as operations, compliance, finance, and IT to gain a comprehensive understanding of potential risks facing the organization. They facilitate regular meetings, gather input from key stakeholders, and coordinate cross-functional risk workshops. This collaborative approach ensures that risk identification is thorough and that mitigation strategies are practical and widely supported. Effective communication and strong relationship-building skills are essential in this role to align risk management efforts across the entire organization.
More about Risk Assessment Manager jobs

What cities are hiring for Risk Assessment Manager jobs?

Cities with the most Risk Assessment Manager job openings:

What are the most commonly searched types of Risk Assessment jobs?

The most popular types of Risk Assessment jobs are:

Who are the top companies hiring for Risk Assessment Manager jobs?

The top employers for Risk Assessment Manager jobs are:

What states have the most Risk Assessment Manager jobs?

States with the most job openings for Risk Assessment Manager jobs include:

What job categories do people searching Risk Assessment Manager jobs look for?

The top searched job categories for Risk Assessment Manager jobs are:

Risk Assessment Manager jobs near you
Infographic showing various Risk Assessment Manager job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 86% Full Time, 12% Part Time, and 1% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $111,556 per year, or $53.6 per hour.

Cyber Risk Assessor III

Seminolehardrock

On-site

Full-time

Re-posted 26 days ago

Job description

Our team members are the key to our company's success, and their health and well-being, as well as that of their families, is very important to us. We offer a comprehensive benefits package that allows our team members stay healthy, plan for their future and maintain a healthy work-life balance. Benefits may vary with employment status. To see our fill list of Team Member Benefits please visit our career site: www.gotoworkhappy.com/benefits

Job Description:

The Cyber Risk Assessor III leads cybersecurity risk assessments, control evaluations, and policy oversight across the organization's Governance, Risk, and Compliance program. This strategic role identifies and assesses risks, evaluates control effectiveness, drives regulatory and framework alignment, and strengthens governance processes organization-wide.

Key Responsibilities

Governance, Risk Assessment & Management

  • Lead cybersecurity risk assessments for systems, applications, business processes, and third-party
  • Drive the identification, analysis, and documentation of cybersecurity risks and control gaps using methodologies such as FAIR and NIST RMF
  • Evaluate and assess the risk of cybersecurity issues, findings, and their potential impact to the organization
  • Oversee and maintain the Cybersecurity risk register with clear ownership, accountability, and tracking
  • Develop mitigation strategies, compensating controls, and risk-based remediation plans with business and technical stakeholders
  • Responsible for monitoring and reporting on risk trends, control effectiveness, compliance status, and remediation progress for leadership and stakeholders.
  • Own and manage the Cybersecurity Exception Process, including evaluation, approval workflows, and ongoing monitoring
  • Establish and track key risk indicators (KRIs) and report on risk trends, control effectiveness, and remediation progress to senior leadership
  • Proactively identify, track, and escalate top organizational cybersecurity risks to leadership
  • Lead the development, documentation, and continuous improvement of security and GRC processes to strengthen governance, consistency, and operational effectiveness.
  • Lead the development, review, and maintenance of cybersecurity policies, standards, procedures, and related governance documentation.
  • Support security awareness, governance communications, and continuous improvement initiatives across the GRC program.

Control Evaluation & Maturity Assessment

  • Lead the evaluation of design and operating effectiveness of security controls across the organization
  • Conduct and manage internal cybersecurity maturity assessments to evaluate program effectiveness and identify improvement opportunities
  • Assess control maturity levels and develop roadmaps for enhancement
  • Map controls to frameworks such as NIST, ISO 27001, PCI DSS, and other applicable standards

Stakeholder Engagement & Reporting

  • Serve as the subject matter expert and advisor on complex cybersecurity risk issues
  • Lead and influence cross-functional engagement with IT, Cybersecurity, Audit, Legal, Privacy, and business teams
  • Develop and deliver executive-level cybersecurity risk reports for senior management and board-level stakeholders, highlighting critical risks and mitigation strategies
  • Communicate complex technical and risk information effectively to both technical and non-technical audiences
  • Present risk assessments, findings, and strategic recommendations to executive leadership and board committees
  • Lead and facilitate risk workshops and training sessions to promote risk-aware culture

Required Qualifications

Experience & Expertise

  • 7+ years of progressive experience in cybersecurity, Governance, Risk, and Compliance (GRC), or information security
  • Demonstrated experience leading enterprise-level risk assessments and governance programs
  • Deep expertise in risk assessment methodologies and control evaluation concepts
  • Experience with cybersecurity frameworks: NIST CSF, ISO 27001, PCI DSS, SOC 2, and/or CIS Controls
  • Proven experience developing policies, standards, procedures, and governance documentation
  • Experience assessing risk of cybersecurity issues and developing remediation strategies
  • Experience conducting technical risk assessments and security architecture reviews
  • Proven experience leading and managing cybersecurity maturity assessments

Technical Knowledge

  • Comprehensive knowledge across all cybersecurity domains including infrastructure security, network security, application security, cloud security, identity and access management, data protection, endpoint security, security operations, and emerging technologies such as artificial intelligence
  • Understanding of security control applicability and limitations across different technology environments
  • Current knowledge of the threat landscape and attack vectors

Skills & Competencies

  • Strategic thinking and ability to translate technical vulnerabilities into business risk and impact
  • Excellent analytical skills with ability to synthesize complex information into actionable insights
  • Superior written and verbal communication and report-writing capabilities
  • Proven ability to influence and drive outcomes without direct authority across all organizational levels
  • Critical thinking and problem-solving abilities
  • Attention to detail while maintaining strategic perspective
  • Demonstrated leadership in mentoring and developing team members

Preferred Qualifications

Certifications

  • CISSP (Certified Information Systems Security Professional)
  • CRISC (Certified in Risk and Information Systems Control)
  • CISA (Certified Information Systems Auditor)
  • CISM (Certified Information Security Manager)
  • ISO 27001 Lead Auditor or Lead Implementer
  • FAIR Certification
  • PCI QSA or ISA

Additional Experience

  • Experience with GRC platforms (E.g., Onspring, ServiceNow GRC, Archer, OneTrust, Vanta, Drata)
  • Background in regulated industries (gaming, financial services retail)
  • Bachelor's degree in Computer Science, Information Security, Cyber Risk Management, or related field (Master's preferred)

Apply