Participates in risk analysis of identified issues to determine recommended risk treatment. * Supports day-to-day information security processes including incident response, third party risk ...
Participates in risk analysis of identified issues to determine recommended risk treatment. * Supports day-to-day information security processes including incident response, third party risk ...
Participates in risk analysis of identified issues to determine recommended risk treatment. * Supports day-to-day information security processes including incident response, third party risk ...
Participates in risk analysis of identified issues to determine recommended risk treatment. * Supports day-to-day information security processes including incident response, third party risk ...
The analyst will work closely with Security Operations, Incident Response, and Vulnerability Management teams to improve detection coverage, reduce false positives, and identify threats that may ...
The analyst will work closely with Security Operations, Incident Response, and Vulnerability Management teams to improve detection coverage, reduce false positives, and identify threats that may ...
The analyst will work closely with Security Operations, Incident Response, and Vulnerability Management teams to improve detection coverage, reduce false positives, and identify threats that may ...
The analyst will work closely with Security Operations, Incident Response, and Vulnerability Management teams to improve detection coverage, reduce false positives, and identify threats that may ...
The analyst will work closely with Security Operations, Incident Response, and Vulnerability Management teams to improve detection coverage, reduce false positives, and identify threats that may ...
The analyst will work closely with Security Operations, Incident Response, and Vulnerability Management teams to improve detection coverage, reduce false positives, and identify threats that may ...
EITS Security Risk Analyst B (Engagement)--Remote Job
San Francisco, CA · On-site
$60 - $70/hr
Job43 - EITS Security Risk Analyst B (Engagement) Location: 100% Remote Max Submissions: 5 Proposed Start Date: ASAP Proposed End Date: 06/30/2026 Role Overview * Serve as a liaison between the CISO ...
Quick apply
EITS Security Risk Analyst B (Engagement)--Remote Job
San Francisco, CA · On-site
$60 - $70/hr
Job43 - EITS Security Risk Analyst B (Engagement) Location: 100% Remote Max Submissions: 5 Proposed Start Date: ASAP Proposed End Date: 06/30/2026 Role Overview * Serve as a liaison between the CISO ...
Sr. Information Security Risk Analyst
Kansas City, MO · On-site +1
$100K - $120K/yr
As the Sr. Information Security Risk Analyst, you will be responsible for supporting UMB's Information Security Program to ensure UMB is able to address rapidly changing threats, technologies, and ...
Sr. Information Security Risk Analyst
Kansas City, MO · On-site +1
$100K - $120K/yr
As the Sr. Information Security Risk Analyst, you will be responsible for supporting UMB's Information Security Program to ensure UMB is able to address rapidly changing threats, technologies, and ...
Senior Information Security Risk Analyst
Johnston, RI · On-site
$106K/yr
Position Summary FM is seeking a Senior Information Security Analyst with deep expertise in Third-Party Risk Management (TPRM), you will play a critical role in protecting FM by assessing how ...
Senior Information Security Risk Analyst
Johnston, RI · On-site
$106K/yr
Position Summary FM is seeking a Senior Information Security Analyst with deep expertise in Third-Party Risk Management (TPRM), you will play a critical role in protecting FM by assessing how ...
Company Description IDEALFORCE has a Contract position available immediately for a IT Security Risk Analyst to join our customer in Phoenix Arizona. This is an ONSITE position. Please find below ...
Company Description IDEALFORCE has a Contract position available immediately for a IT Security Risk Analyst to join our customer in Phoenix Arizona. This is an ONSITE position. Please find below ...
Sr. Information Security Risk Analyst
Kansas City, MO · On-site
$100K - $120K/yr
As the Sr. Information Security Risk Analyst, you will be responsible for supporting UMB's Information Security Program to ensure UMB is able to address rapidly changing threats, technologies, and ...
Sr. Information Security Risk Analyst
Kansas City, MO · On-site
$100K - $120K/yr
As the Sr. Information Security Risk Analyst, you will be responsible for supporting UMB's Information Security Program to ensure UMB is able to address rapidly changing threats, technologies, and ...
Information Security Risk Analyst (SOC)
Manhattan, NY · On-site
$90K - $125K/yr
Triage and analyze security alerts to determine severity, scope, and potential impact and business risk. * Investigate suspicious system, network, and user activity, escalating potential security ...
Quick apply
Information Security Risk Analyst (SOC)
Manhattan, NY · On-site
$90K - $125K/yr
Triage and analyze security alerts to determine severity, scope, and potential impact and business risk. * Investigate suspicious system, network, and user activity, escalating potential security ...
Information Security Risk Analyst (SOC)
Manhattan, NY · Hybrid
$90K - $125K/yr
Triage and analyze security alerts to determine severity, scope, and potential impact and business risk. * Investigate suspicious system, network, and user activity, escalating potential security ...
Quick apply
Information Security Risk Analyst (SOC)
Manhattan, NY · Hybrid
$90K - $125K/yr
Triage and analyze security alerts to determine severity, scope, and potential impact and business risk. * Investigate suspicious system, network, and user activity, escalating potential security ...
Operational Risk Analyst -Security Governance & Risk Issues Management Location: Merrifield VA - Hybrid Duration: 12 months Basic Purpose This role is specifically designated as an Operational Risk ...
Operational Risk Analyst -Security Governance & Risk Issues Management Location: Merrifield VA - Hybrid Duration: 12 months Basic Purpose This role is specifically designated as an Operational Risk ...
RISK ANALYST
Canton, CT · On-site
... security risk, and model risk. * Track, manage, monitor, and report on risk issues and corrective ... Analyze and report Key Risk Indicators (KRIs) and Risk Appetite Statement (RAS) metrics. * Prepare ...
Quick apply
RISK ANALYST
Canton, CT · On-site
... security risk, and model risk. * Track, manage, monitor, and report on risk issues and corrective ... Analyze and report Key Risk Indicators (KRIs) and Risk Appetite Statement (RAS) metrics. * Prepare ...
RISK ANALYST
Canton, CT · On-site
... security risk, and model risk. * Track, manage, monitor, and report on risk issues and corrective ... Analyze and report Key Risk Indicators (KRIs) and Risk Appetite Statement (RAS) metrics. * Prepare ...
Quick apply
RISK ANALYST
Canton, CT · On-site
... security risk, and model risk. * Track, manage, monitor, and report on risk issues and corrective ... Analyze and report Key Risk Indicators (KRIs) and Risk Appetite Statement (RAS) metrics. * Prepare ...
Security Risk Manager
San Francisco, CA · Hybrid
$194K - $220K/yr
Our security team protects Asana's employees, users, and customers by proactively addressing ... analysis. You back up risk ratings with numbers, not just color codes. * Hands-on experience ...
Security Risk Manager
San Francisco, CA · Hybrid
$194K - $220K/yr
Our security team protects Asana's employees, users, and customers by proactively addressing ... analysis. You back up risk ratings with numbers, not just color codes. * Hands-on experience ...
Security Risk Manager
San Francisco, CA · On-site
$194K - $220K/yr
Our security team protects Asana's employees, users, and customers by proactively addressing ... analysis. You back up risk ratings with numbers, not just color codes. * Hands-on experience ...
Security Risk Manager
San Francisco, CA · On-site
$194K - $220K/yr
Our security team protects Asana's employees, users, and customers by proactively addressing ... analysis. You back up risk ratings with numbers, not just color codes. * Hands-on experience ...
Information Security Risk Analyst - Cyber Resiliency
Atlanta, GA · On-site
$120K - $130K/yr
As an Information Security Staff Risk Analyst at Deluxe, you will be instrumental in maintaining our high standards of security and compliance, in particular with our cyber resilience and ...
Information Security Risk Analyst - Cyber Resiliency
Atlanta, GA · On-site
$120K - $130K/yr
As an Information Security Staff Risk Analyst at Deluxe, you will be instrumental in maintaining our high standards of security and compliance, in particular with our cyber resilience and ...
Information Security Risk Analyst - Cyber Resiliency
Minneapolis, MN · On-site
$120K - $130K/yr
As an Information Security Staff Risk Analyst at Deluxe, you will be instrumental in maintaining our high standards of security and compliance, in particular with our cyber resilience and ...
Information Security Risk Analyst - Cyber Resiliency
Minneapolis, MN · On-site
$120K - $130K/yr
As an Information Security Staff Risk Analyst at Deluxe, you will be instrumental in maintaining our high standards of security and compliance, in particular with our cyber resilience and ...
Information Security Risk Analyst - Cyber Resiliency
Atlanta, GA · On-site
$120K - $130K/yr
As an Information Security Staff Risk Analyst at Deluxe, you will be instrumental in maintaining our high standards of security and compliance, in particular with our cyber resilience and ...
Information Security Risk Analyst - Cyber Resiliency
Atlanta, GA · On-site
$120K - $130K/yr
As an Information Security Staff Risk Analyst at Deluxe, you will be instrumental in maintaining our high standards of security and compliance, in particular with our cyber resilience and ...
Security Risk Analyst information
See salary details
$10.34 - $15.76
2% of jobs
$15.76 - $21.18
0% of jobs
$21.18 - $26.60
1% of jobs
$26.60 - $32.01
1% of jobs
$32.01 - $37.43
1% of jobs
$41.50 is the 25th percentile. Wages below this are outliers.
$37.43 - $42.85
26% of jobs
$42.85 - $48.27
11% of jobs
The median wage is $50.21 / hr.
$48.27 - $53.69
22% of jobs
$53.69 - $59.11
9% of jobs
$59.54 is the 75th percentile. Wages above this are outliers.
$59.11 - $64.53
17% of jobs
$64.53 - $69.95
9% of jobs
$10
$50
$69
How much do security risk analyst jobs pay per hour?
As of Sep 3, 2026, the average hourly pay for security risk analyst in the United States is $50.41, according to ZipRecruiter salary data. Most workers in this role earn between $40.87 and $60.10 per hour, depending on experience, location, and employer.
What does a security risk analyst do?
A Security Risk Analyst is responsible for identifying, assessing, and mitigating risks to an organization's information systems and data. They analyze security measures, conduct vulnerability assessments, and recommend strategies to protect against threats such as cyberattacks, data breaches, and unauthorized access. Their work helps ensure that a company's digital assets remain safe and compliant with industry regulations. Security Risk Analysts collaborate with IT teams and management to implement effective security policies and respond to incidents as needed.
What are the key skills and qualifications needed to thrive as a security risk analyst?
To thrive as a Security Risk Analyst, you need a strong background in risk assessment, information security principles, and analytical thinking, often supported by a degree in cybersecurity, IT, or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security assessment tools, and certifications like CISSP or CISM is highly valuable. Excellent communication, attention to detail, and problem-solving abilities help you translate complex risks for varied stakeholders and drive mitigation strategies. These skills and qualities are crucial for identifying vulnerabilities, minimizing threats, and maintaining organizational security and compliance.
What are some common challenges security risk analysts face when collaborating with other departments?
Security Risk Analysts often work closely with IT, compliance, and business units to assess and mitigate risks. A common challenge is bridging the gap between technical security requirements and business objectives, as not all stakeholders may have a cybersecurity background. Effective communication and education are key to ensuring that risk recommendations are understood and adopted. Additionally, prioritizing risks with limited resources and balancing security with operational needs can be complex, requiring strong collaboration and negotiation skills.
What is the difference between Security Risk Analyst vs Security Analyst?
| Aspect | Security Risk Analyst | Security Analyst |
|---|---|---|
| Certifications | CompTIA Security+, CISSP, CISA | CompTIA Security+, CISSP, CEH |
| Work Environment | Risk assessment, vulnerability analysis, policy development | Monitoring security systems, incident response, security audits |
| Employer & Industry Usage | Financial, healthcare, government sectors focusing on risk mitigation | IT departments across various industries focusing on security operations |
While both roles focus on cybersecurity, Security Risk Analysts primarily assess and manage potential security threats and vulnerabilities, emphasizing risk mitigation strategies. Security Analysts tend to monitor security systems, respond to incidents, and ensure ongoing security measures. Both roles often require similar certifications and work environments but differ in their core responsibilities within cybersecurity teams.
What is a security risk analyst?
A security risk analyst is a professional who identifies, assesses, and mitigates security threats to an organization’s information systems. They analyze vulnerabilities, develop security strategies, and often use tools like risk assessment frameworks and security software to protect data and infrastructure.
More about Security Risk Analyst jobs
What cities are hiring for Security Risk Analyst jobs?
Cities with the most Security Risk Analyst job openings:
Who are the top companies hiring for Security Risk Analyst jobs?
The top employers for Security Risk Analyst jobs are:
What states have the most Security Risk Analyst jobs?
States with the most job openings for Security Risk Analyst jobs include:
What job categories do people searching Security Risk Analyst jobs look for?
The top searched job categories for Security Risk Analyst jobs are:
What are popular job titles related to Security Risk Analyst jobs?
For Security Risk Analyst jobs, the most frequently searched job titles are:
Full-time
This job post has expired today. Applications are no longer accepted.
Nationwide Children's Hospital rating
6.9
Based on 131 frontline employees who took The Breakroom Quiz
550th of 1,064 rated hospitals
Job description
Overview:
Job Description Summary:
Supports the NCH Information Security and Risk Department (ISRD). Participates in varying subjects including Information Security, Risk Management, Privacy, and other related concepts.
Job Description:
Essential Functions:
Education Requirement:
BS in Computer Science or equivalent experience required.
Continues to stay actively involved in outside education advancement.
Licensure Requirement:
(not specified)
Certifications:
Security+, CISSP or equivalent preferred.
Skills:
Strong problem-solving ability.
Exceptional presentation skills.
Exceptional interpersonal, written, and verbal communication skills.
Demonstrated project management skills.
Proficient in Microsoft Office.
Experience:
Twoyears of experience in IT; experience in healthcare, preferred.
Physical Requirements:
OCCASIONALLY: Climb stairs/ladder, Lifting / Carrying: 0-10 lbs, Lifting / Carrying: 11-20 lbs, Standing, Walking
FREQUENTLY: (none specified)
CONTINUOUSLY: Audible speech, Computer skills, Decision Making, Flexing/extending of neck, Hand use: grasping, gripping, turning, Hearing acuity, Interpreting Data, Problem solving, Repetitive hand/arm use, Seeing - Far/near, Sitting
Additional Physical Requirements performed but not listed above:
(not specified)
"The above list of duties is intended to describe the general nature and level of work performed by individuals assigned to this classification. It is not to be construed as an exhaustive list of duties performed by the individuals so classified, nor is it intended to limit or modify the right of any supervisor to assign, direct, and control the work of employees under their supervision. EOE M/F/Disability/Vet"
Job Description Summary:
Supports the NCH Information Security and Risk Department (ISRD). Participates in varying subjects including Information Security, Risk Management, Privacy, and other related concepts.
Job Description:
Essential Functions:
- Participates in the development and maintenance of information security policies, standards, and procedures.
- Plans and conducts security assessments on new and existing systems, processes, and technologies to determine compliance with policies, standards and regulatory requirements.
- Participates in risk analysis of identified issues to determine recommended risk treatment.
- Supports day-to-day information security processes including incident response, third party risk management, vulnerability management reporting, security awareness training, and disaster recovery.
- Coordinates business and information services resources for project and operational support.
- Stays up-to-date and informed of information security industry changes and trends.
Education Requirement:
BS in Computer Science or equivalent experience required.
Continues to stay actively involved in outside education advancement.
Licensure Requirement:
(not specified)
Certifications:
Security+, CISSP or equivalent preferred.
Skills:
Strong problem-solving ability.
Exceptional presentation skills.
Exceptional interpersonal, written, and verbal communication skills.
Demonstrated project management skills.
Proficient in Microsoft Office.
Experience:
Twoyears of experience in IT; experience in healthcare, preferred.
Physical Requirements:
OCCASIONALLY: Climb stairs/ladder, Lifting / Carrying: 0-10 lbs, Lifting / Carrying: 11-20 lbs, Standing, Walking
FREQUENTLY: (none specified)
CONTINUOUSLY: Audible speech, Computer skills, Decision Making, Flexing/extending of neck, Hand use: grasping, gripping, turning, Hearing acuity, Interpreting Data, Problem solving, Repetitive hand/arm use, Seeing - Far/near, Sitting
Additional Physical Requirements performed but not listed above:
(not specified)
"The above list of duties is intended to describe the general nature and level of work performed by individuals assigned to this classification. It is not to be construed as an exhaustive list of duties performed by the individuals so classified, nor is it intended to limit or modify the right of any supervisor to assign, direct, and control the work of employees under their supervision. EOE M/F/Disability/Vet"
What Nationwide Children's Hospital employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About Nationwide Children's Hospital
Sourced by ZipRecruiter
Nationwide Children's Hospital, established in 1894, is a leading pediatric healthcare system based in Columbus, Ohio, United States. They serve as a primary pediatric network, providing wellness, preventive, diagnostic, treatment, and rehabilitative care for infants, children, adolescents, and adults with congenital disease. Being the third-largest pediatric hospital in the nation, Nationwide Children's Hospital prides itself on its relentless commitment to children and their families, driven by their core values of respect, integrity, determination, empathy, and solidarity. The institution's comprehensive mission is to enhance the health of children by providing high-quality, family-centered care, conducting groundbreaking research, advocating for pediatric health, and training top healthcare professionals.
Industry
Hospitals
Company size
10,000+ Employees
Headquarters location
Columbus, OH, US
Year founded
1892