ZipRecruiter

Log In

1

Security Risk Management Specialist Jobs (NOW HIRING)

Hireblazer

Senior Risk Management Specialist

Austin, TX · On-site

$97K/yr

The client is looking for Risk Management Specialist with experience in information security or cyber risk to lead the design, implementation, and optimization of enterprise and third-party risk ...

CFS

Risk Management Specialist

Oakbrook Terrace, IL · Hybrid

$70K - $85K/yr

Risk Management Specialist | No Sponsorship Available Risk Management Specialist Job Details: Compensation: $70,000 - $85,000 Work Environment: Hybrid Office Location: Oakbrook, IL Travel: Less than ...

Northern Light Health

Risk Management Specialist

Portland, ME · On-site

$32.65 - $50.11/hr

The Risk Management Specialist works under the general supervision of the Director of Quality and ... The incumbent is responsible for reporting all security events, potential events, or other security ...

CFS

Risk Management Specialist

Oakbrook Terrace, IL · Hybrid

$70K - $85K/yr

Risk Management Specialist | No Sponsorship Available Risk Management Specialist Job Details: Compensation: $70,000 - $85,000 Work Environment: Hybrid Office Location: Oakbrook, IL Travel: Less than ...

Qualfon

Risk Management Specialist

Casselberry, FL

The position serves as a site-level risk and security control partner, helping ensure that ... The Risk Management Specialist supports Qualfon's mission by protecting the integrity of the work ...

New

Qualfon

Risk Management Specialist

Casselberry, FL

The position serves as a site-level risk and security control partner, helping ensure that ... The Risk Management Specialist supports Qualfon's mission by protecting the integrity of the work ...

next page

Showing results 1-20

All JobsSecurity Risk Management Specialist Jobs

Security Risk Management Specialist information

See salary details

$37.5K

$72.9K

$138.5K

How much do security risk management specialist jobs pay per year?

As of Jul 30, 2026, the average yearly pay for security risk management specialist in the United States is $72,927.00, according to ZipRecruiter salary data. Most workers in this role earn between $50,000.00 and $84,500.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Security Risk Management Specialist, and why are they important?

To thrive as a Security Risk Management Specialist, you need expertise in risk assessment, threat analysis, and security frameworks, often supported by a degree in information security or a related field. Familiarity with tools such as risk management software, SIEM systems, and certifications like CISSP or CISM are commonly expected. Strong analytical thinking, communication, and problem-solving abilities make someone stand out in this role. These skills and qualifications are crucial for identifying vulnerabilities, mitigating threats, and ensuring organizational resilience against security risks.

Is security risk management a good career?

Security risk management specialists analyze and mitigate security threats to organizations, often requiring knowledge of cybersecurity, risk assessment, and compliance standards. The field offers strong job growth, competitive salaries, and opportunities across various industries, making it a viable and rewarding career choice for those interested in protecting assets and information.

How much do security management specialists make?

Security Risk Management Specialists typically earn a median annual salary of around $80,000 to $100,000, depending on experience, certifications, and location. Senior roles or those with specialized skills can earn higher salaries, often exceeding $120,000 annually.

How does a Security Risk Management Specialist typically collaborate with other departments to enhance organizational security?

Security Risk Management Specialists frequently work cross-functionally, partnering with IT, legal, compliance, and operations teams to identify, assess, and mitigate potential security risks. They often facilitate risk assessments, lead security awareness training, and help develop incident response plans in collaboration with key stakeholders. This role requires strong communication skills to translate technical risks into business terms, ensuring all departments understand their role in maintaining security. Regular meetings and project involvement across teams are common, fostering a proactive security culture throughout the organization.

What is the difference between Security Risk Management Specialist vs Security Analyst?

AspectSecurity Risk Management SpecialistSecurity Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, security planningMonitoring security systems, incident response, vulnerability analysis
Industry UsageCorporate security, government agencies, consulting firmsIT departments, cybersecurity firms, financial institutions

The Security Risk Management Specialist focuses on identifying and mitigating security risks through strategic planning and policy development. In contrast, the Security Analyst primarily monitors security systems and responds to incidents. Both roles require similar certifications and are vital in protecting organizational assets, but their daily tasks and focus areas differ.

What are Security Risk Management Specialists?

Security Risk Management Specialists are professionals who identify, assess, and develop strategies to mitigate risks that could threaten an organization’s assets, data, and operations. They analyze potential security threats, develop policies and procedures, and monitor compliance to ensure the safety of people and information. Their work involves collaborating with other departments to implement security measures and respond to incidents. These specialists are vital for organizations to manage risks and maintain regulatory compliance.

What does a risk management specialist do?

A risk management specialist identifies, assesses, and prioritizes potential security threats to an organization. They develop strategies and implement policies to mitigate risks, often using tools like risk assessment frameworks and security protocols. Their work helps protect assets, personnel, and information from various threats.

Can I make $200,000 a year in cyber security?

Security Risk Management Specialists can potentially earn $200,000 or more annually, especially with extensive experience, advanced certifications like CISSP, and leadership roles. High salaries are often associated with senior positions, specialized skills, and working in industries with high security demands.
More about Security Risk Management Specialist jobs
What job categories do people searching Security Risk Management Specialist jobs look for? The top searched job categories for Security Risk Management Specialist jobs are:
Security Risk Management Specialist jobs near you
Infographic showing various Security Risk Management Specialist job openings in the United States as of July 2026, with employment types broken down into 84% Full Time, 13% Part Time, 1% Temporary, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $72,927 per year, or $35.1 per hour.

Information Security Risk Management Specialist

LHH US

Reston, VA • On-site

$60 - $75/hr

Full-time, Contractor

Medical, Dental, Vision, Life, Retirement, PTO

Posted 8 days ago

Job description

Information Security Risk Management Specialist
Location: Reston, VA (Hybrid)
8 month contract
$60-75/hr W2. (No C2C at this time)
About the Opportunity
Our client, a global leader in technology and entertainment, is seeking a Information Security Risk Management Specialist to join its Information Security organization. This role will be responsible for identifying, assessing, and managing information security risks across business operations, technology environments, and third-party partnerships.
The ideal candidate combines strong information security knowledge with a consultative approach, helping business and technology teams understand risk, implement practical solutions, and strengthen overall security posture.
Key Responsibilities
  • Lead end-to-end information security risk assessments for systems, applications, networks, infrastructure, facilities, projects, and third-party vendors
  • Identify, evaluate, and communicate security risks while providing actionable recommendations for mitigation and remediation
  • Prepare and present risk assessment reports to support business decisions, risk acceptance processes, and executive-level discussions
  • Manage third-party and vendor security assessments, including contract and security control reviews
  • Analyze emerging threats and incorporate threat intelligence into risk evaluations to identify potential exposures
  • Support Information Security Management System (ISMS) activities through control reviews, testing, evidence validation, and maturity assessments
  • Partner with business, technology, and security stakeholders to provide guidance on security requirements, policies, and risk management practices
  • Deliver security risk consultation and education to various business units and project teams
  • Evaluate security controls and recommend improvements to reduce organizational risk
  • Assist in driving policy compliance, audit readiness, and continuous risk management program enhancements
Qualifications
Required
  • Bachelor's degree or equivalent combination of education and experience
  • 5+ years of professional experience in information security, cybersecurity, risk management, governance, compliance, or related disciplines
  • Experience conducting information security risk assessments and communicating findings to business and technical stakeholders
  • Understanding of information security principles, controls, and industry best practices
  • Strong verbal and written communication skills with the ability to present complex topics to both technical and non-technical audiences
  • Experience building relationships across cross-functional teams and influencing risk-related decisions
Preferred
  • Experience in Governance, Risk & Compliance (GRC) programs
  • Knowledge of third-party risk management and vendor security assessments
  • Familiarity with security frameworks such as NIST, ISO 27001, CIS Controls, or similar standards
  • Experience with cloud security environments, including AWS
  • Understanding of networking, infrastructure security, operating systems, databases, and identity/access management concepts
  • Exposure to SaaS security assessments
  • Knowledge of emerging technologies and security considerations, including AI-related risk
What Makes a Strong Candidate
  • Demonstrated ability to perform comprehensive risk assessments and translate findings into business-focused recommendations
  • Experience balancing security requirements with operational and business objectives
  • Strong analytical and problem-solving skills
  • Ability to effectively prioritize competing initiatives in a fast-paced environment
  • Collaborative mindset with a customer-service approach to internal stakeholders
  • Confidence presenting risk concepts and recommendations to leadership teams
Why Apply
  • Opportunity to support security initiatives within a globally recognized organization
  • Exposure to enterprise-scale information security and risk management programs
  • Collaborative environment working closely with security, technology, and business leaders
  • Career growth within a mature and evolving cybersecurity organization
If you or someone you know is interested in this Information Security Risk Management Specialist role in Reston, VA, please apply today!
Benefit offerings for full-time employment include medical, dental, vision, term life and AD&D insurance, short-term and long-term disability, additional voluntary benefits, commuter benefits, wellness plans, and a 401k plan or a nonqualified deferred compensation plan. Available paid leave includes Personal Time Off (PTO) on an accrual basis. PTO and holiday hours are prorated based on hire date within the calendar year.
Equal Opportunity Employer/Veterans/Disabled To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://www.lhh.com/us/en/candidate-privacy The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:
• The California Fair Chance Act
• Los Angeles City Fair Chance Ordinance
• Los Angeles County Fair Chance Ordinance for Employers
• San Francisco Fair Chance Ordinance
Pay Details: $60.00 to $75.00 per hour
Search managed by: Krysti Ellis
Benefit offerings available for our associates include medical, dental, vision, life insurance, short-term disability, additional voluntary benefits, EAP program, commuter benefits and a 401K plan. Our benefit offerings provide employees the flexibility to choose the type of coverage that meets their individual needs. In addition, our associates may be eligible for paid leave including Paid Sick Leave or any other paid leave required by Federal, State, or local law, as well as Holiday pay where applicable.
Equal Opportunity Employer/Veterans/Disabled
Military connected talent encouraged to apply
To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://www.lhh.com/us/en/candidate-privacy
The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:
  • The California Fair Chance Act
  • Los Angeles City Fair Chance Ordinance
  • Los Angeles County Fair Chance Ordinance for Employers
  • San Francisco Fair Chance Ordinance
Massachusetts Candidates Only: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.