ZipRecruiter

Log In

1

Security Risk Consultant Jobs (NOW HIRING)

Xforia, Inc.

IT Security Analyst T2

Herndon, VA · On-site

Working for the Cybersecurity department, the Cyber Trust Analyst, functions as a highly skilled control and risk consultant responsible for responding to internal privacy, security, risk and IT ...

Upcoresolutions

Risk Consulting

New York, NY

Our client is seeking a Risk Consultant that is a detail-oriented person to assist clients to ... Request review of security as necessary. Provide actuarial reports and other information requested ...

SEI

Security, Risk and Compliance Consultant

Miami, FL · On-site

WHAT WE DO Our Security, Risk and Compliance consultants work with clients at all levels of the organization, from the C-suite to the shop floor, helping them to deliver on their most strategic ...

next page

Showing results 1-20

All JobsSecurity Risk Consultant Jobs

Security Risk Consultant information

See salary details

$10

$50

$108

How much do security risk consultant jobs pay per hour?

As of Jul 4, 2026, the average hourly pay for security risk consultant in the United States is $50.91, according to ZipRecruiter salary data. Most workers in this role earn between $24.76 and $63.70 per hour, depending on experience, location, and employer.

How much does a risk consultant earn?

A security risk consultant's average salary varies by experience and location but typically ranges from $70,000 to $120,000 annually. Entry-level positions may start lower, while experienced professionals with certifications like CISSP or CISM can earn higher salaries, especially in high-demand industries or regions.

What are the key skills and qualifications needed to thrive as a Security Risk Consultant, and why are they important?

To thrive as a Security Risk Consultant, you need expertise in risk assessment, security frameworks, regulatory compliance, and a relevant degree such as in cybersecurity or information security. Familiarity with tools like risk management software, vulnerability assessment platforms, and recognized certifications such as CISSP or CISM is typically required. Strong analytical thinking, communication skills, and the ability to influence stakeholders set top consultants apart. These skills ensure the accurate identification and mitigation of security risks, safeguarding organizational assets and compliance with industry standards.

Can you make $500,000 a year in cyber security?

Security Risk Consultants and other cybersecurity professionals can potentially earn $500,000 or more annually, especially with senior roles, extensive experience, specialized skills, and certifications like CISSP or CISA. High earnings are often associated with leadership positions, consulting, or working in high-demand industries, but such salaries are not typical for entry-level roles. Achieving this level usually requires years of experience, advanced expertise, and a strong professional network.

How does a Security Risk Consultant typically collaborate with clients and internal teams during a risk assessment project?

Security Risk Consultants work closely with clients to understand their unique risk landscape, often conducting interviews and site visits to gather information. They collaborate with internal teams such as cybersecurity analysts, compliance experts, and IT staff to analyze data and develop comprehensive risk mitigation strategies. Throughout the project, consultants maintain open communication with stakeholders, presenting findings, making recommendations, and ensuring that solutions align with the client's business objectives and regulatory requirements. This collaborative approach helps build trust and ensures the delivery of actionable, tailored security solutions.

What does a Security Risk Consultant do?

A Security Risk Consultant assesses potential threats and vulnerabilities within an organization’s physical or digital infrastructure. They help identify risks, develop mitigation strategies, and ensure compliance with security regulations and best practices. Their responsibilities often include conducting risk assessments, advising on security policies, and recommending improvements to reduce exposure to threats. Security Risk Consultants work with clients across various industries to safeguard assets, data, and people. Their expertise helps organizations proactively address security challenges and minimize potential losses.

How much does a security consultant get paid?

The average salary for a security risk consultant varies depending on experience, location, and certifications, but typically ranges from $70,000 to $120,000 annually. Senior consultants with specialized skills or certifications like CISSP or CISA can earn higher salaries, and some may work on a contract basis or have additional bonuses.

What is the difference between Security Risk Consultant vs Security Analyst?

AspectSecurity Risk ConsultantSecurity Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentConsulting firms, corporate security teamsIT departments, security operations centers
Primary FocusAssessing and managing security risks, advising clientsMonitoring security systems, incident response
Industry UsageFinance, healthcare, government, consultingTechnology, finance, government agencies

While both roles involve cybersecurity, Security Risk Consultants focus on evaluating and advising on security risks for organizations, often working in consulting settings. Security Analysts primarily monitor and respond to security threats within an organization’s IT infrastructure. Understanding these differences helps in choosing the right career path or job search focus.

What do security risk consultants do?

Security risk consultants analyze an organization’s security posture to identify vulnerabilities and develop strategies to mitigate risks. They conduct assessments, review policies, and recommend security measures, often using tools like risk management frameworks and security audits. Their work helps organizations protect sensitive data and comply with industry standards.
More about Security Risk Consultant jobs
What cities are hiring for Security Risk Consultant jobs? Cities with the most Security Risk Consultant job openings:
What are the most commonly searched types of Security Risk Consultant jobs? The most popular types of Security Risk Consultant jobs are:
What states have the most Security Risk Consultant jobs? States with the most job openings for Security Risk Consultant jobs include:
What job categories do people searching Security Risk Consultant jobs look for? The top searched job categories for Security Risk Consultant jobs are:
Security Risk Consultant jobs near you
Infographic showing various Security Risk Consultant job openings in the United States as of June 2026, with employment types broken down into 90% Full Time, 9% Part Time, and 1% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $105,890 per year, or $50.9 per hour.
Security, Risk and Compliance Consultant

Security, Risk and Compliance Consultant

SEI

Boston, MA

Other

Posted 24 days ago

Job description

WHAT WE DO

Our Security, Risk and Compliance consultants work with clients at all levels of the organization, from the C-suite to the shop floor, helping them to deliver on their most strategic initiatives. We're known for making realistic, data-driven decisions that deliver value in tangible ways to our clients. Our clients ask for us on projects that require a superior combination of technical and business capabilities, people and management skills, and a collaborative mindset. We excel in understanding complex programs and strategic initiatives and breaking them into actionable pieces.

We are actively looking for professionals in the following areas:

  • Compliance
  • Information Security
  • Risk Management
  • Data Privacy

The ideal candidate's experience may include but is not limited to the following:

  • Management or participation in Cybersecurity, Information Security, Risk, Compliance and/or Data Privacy Programs or Projects
    • Sample projects/programs could include but are not limited to:
      • Compliance framework mapping and implementation,
      • Regulatory mapping and implementation
      • Audit, risk or regulatory remediation management,
      • Readiness for new laws and regulations,
      • Risk, Compliance or Information Security risk reporting and monitoring
      • Creation of roadmaps to mature or advance Risk, Compliance or Information Security Strategies/Programs/Controls
      • Design and enablement of cyber controls functions and processes
      • Change management related to regulatory adoption or compliance changes
      • Audit or certification readiness
    • Familiarity or direct experience with GRC/Cybersecurity solutions, tools and technologies
    • Control design or maturation for high-demand technical areas such as ERP, Identity and Access Management, Business Continuity and Resiliency, Cloud
    • Knowledge of and/or application of industry specific regulations, laws, and standards such as the EU-GDPR, CCPA/CPRA, HIPAA, PCI
    • Knowledge of and/or application of compliance and security frameworks and standards such as COSO, NIST, ISO
    • Management of regulatory, internal or external audits, or experience as an auditor
    • Projects or roles requiring coordination across lines of defense working with technical, business, compliance, risk and audit teams to deliver solutions
    • Work or projects with military or federal government agencies in Risk, Compliance or Information Security/Cyber Security sectors
    • Certifications: CIPP, CRCM, CRM, ARM, CISSP, CISM

QUALIFICATIONS

Required-

  • Alignment to our core values: Excellence, Participation, Integrity, and Collaboration
  • Hungry, Humble, Smart
  • Demonstrated business and technology acumen
  • Strong written and verbal communication skills
  • Understanding and experience solving real business problems
  • Proven track record of delivering results
  • Experience working with and/or leading a team
  • Ability to work across industries, roles, functions & technologies
  • Authorization for permanent employment in the United States (this position is not eligible for immigration sponsorship)

Preferred-

  • Bachelor's degree
  • 8+ years professional experience
  • Experience across our service offerings

Apply