1

Security Risk Management Jobs in New York (NOW HIRING)

Manager - Risk Management

New York, NY · Hybrid

$103K - $174K/yr

... security, and service. As part of Team Amex, you'll experience this powerful backing with ... Knowledge of risk management frameworks, regulatory landscape, and methodologies. Preferred ...

Coordinate with InfoSec and Privacy on security and data protection requirements. * Partner ... Risk Management: Evaluate the risk landscape andidentifypragmaticssolutions. * Continuous ...

Managers, Risk Management

Manhattan, NY · On-site

$126K - $150K/yr

Collaborate with technology and other groups on integration and implementation of risk management ... security, and service. As part of Team Amex, you'll experience our powerful backing with ...

M0 Labs - Head of Security & Risk

New York, NY · On-site +1

$117K - $153K/yr

Build and Own Enterprise Risk Management : Build M0's enterprise risk program from scratch. Cover security, operational, regulatory, and counterparty risk, including the risk register, annual ...

Provide 2LoD oversight for Securities Lending (Stock Loan) activities and principal trading risks ... Experience: 10-15 years in Risk Management, with a minimum of 5 years in a senior leadership ...

This is a high-visibility, cross-functional leadership role that sits at the intersection of security engineering, risk management, and emerging technology. The Director, AI Security will advise the ...

New

next page

Showing results 1-20

Security Risk Management information

See New York salary details

$11

$55

$76

How much do security risk management jobs pay per hour?

As of Jun 28, 2026, the average hourly pay for security risk management in New York is $55.15, according to ZipRecruiter salary data. Most workers in this role earn between $44.71 and $65.77 per hour, depending on experience, location, and employer.

What are the typical challenges faced by professionals in Security Risk Management, and how can they be addressed?

Professionals in Security Risk Management often encounter challenges such as rapidly evolving threats, balancing security with business operations, and ensuring organization-wide compliance with regulations. Staying current with the latest risk trends and fostering cross-department collaboration are key strategies for overcoming these obstacles. Additionally, clear communication of risks to non-technical stakeholders and ongoing training are essential for building a proactive security culture and effective risk mitigation.

Can I make $200,000 a year in cyber security?

Security Risk Management professionals can potentially earn $200,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and roles in high-demand industries or senior leadership positions. Salary levels vary based on location, company size, and individual expertise, but high-level cybersecurity roles often offer compensation in this range.

Can you make $500,000 a year in cyber security?

Security Risk Management professionals can potentially earn $500,000 or more annually, especially at senior levels, in leadership roles, or within large organizations. Achieving this income typically requires extensive experience, advanced certifications like CISSP or CISM, and expertise in high-demand areas such as threat intelligence or security architecture.

Is security risk management a good career?

Security risk management is a viable career that involves identifying, assessing, and mitigating security threats to organizations. It often requires certifications such as CISSP or CISM and skills in risk analysis, security policies, and incident response. The field offers opportunities across various industries with increasing demand for cybersecurity expertise.

What is Security Risk Management?

Security Risk Management is the process of identifying, assessing, and mitigating risks to an organization's information, assets, and operations. It involves evaluating potential threats and vulnerabilities, determining their potential impact, and implementing strategies to minimize or control these risks. The goal is to protect the organization from security breaches, data loss, and other threats while ensuring compliance with legal and regulatory requirements. Security Risk Management is essential for maintaining business continuity and safeguarding reputation.

What are the key skills and qualifications needed to thrive in Security Risk Management, and why are they important?

To excel in Security Risk Management, you need a solid understanding of risk assessment frameworks, cybersecurity principles, and compliance standards, often supported by a degree in information security or related fields. Familiarity with risk management tools, security incident response systems, and certifications such as CISSP or CISM is typically required. Strong analytical thinking, communication, and decision-making skills help professionals navigate complex threats and collaborate across departments. These competencies are crucial for effectively identifying, mitigating, and communicating risks to protect organizational assets and ensure regulatory compliance.

What is the difference between Security Risk Management vs Security Analyst?

AspectSecurity Risk ManagementSecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentStrategic, policy-focused, risk assessmentOperational, monitoring, incident response
Employer & Industry UsageOrganizations managing enterprise security risksSecurity teams, cybersecurity firms, IT departments

Security Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy development and strategic planning. In contrast, Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. Both roles are essential but differ in scope and responsibilities within the cybersecurity field.

Is SOC 1 entry level?

SOC 1 (Service Organization Control 1) reports are audit reports used to evaluate internal controls at a service organization and are not job roles. In the context of security risk management, entry-level positions typically require foundational knowledge of security principles, certifications like CompTIA Security+ or CISSP, and experience with risk assessment tools, but SOC 1 itself is not an entry-level role.
What job categories do people searching Security Risk Management jobs in New York look for? The top searched job categories for Security Risk Management jobs in New York are:
Infographic showing various Security Risk Management job openings in New York as of June 2026, with employment types broken down into 93% Full Time, 5% Part Time, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $114,707 per year, or $55.1 per hour.
Manager - Risk Management

Manager - Risk Management

American Express

New York, NY • Hybrid

$103K - $174K/yr

Full-time

Medical, Dental, Vision, Life, Retirement

Posted 13 days ago


American Express rating

8.5

Company rating: 8.5 out of 10

Based on 34 frontline employees who took The Breakroom Quiz

26th of 139 rated financial services


Job description

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Key Responsibilities:

  • Risk Identification & Assessment:

  • Proactively identify, assess, monitor, and report on key risks inherent in the business unit's activities, including credit risk, market risk, operational risk, compliance risk, strategic risk, and reputational risk

  • Provide independent review and challenge to the business unit's risk ID and assessment process and outcomes to ensure completeness and accuracy and the effective identification of the business unit's material, top and emerging risks

  • Monitoring, Reporting and Communication:

  • Analyze risk data across the business unit and proactively support team leadership in identifying key risk indicators (KRIs) to monitor key risks trends and enable the reporting and oversight related to the business unit

  • Strong presentation and story boarding skills to appropriately elevate programs and process level details to leadership.

  • Leverage data visualization tools and reporting automation solutions where appropriate to enhance the efficiency and accuracy of risk reporting processes.

  • Risk Governance and Independent Review:

  • Develop and maintain a comprehensive understanding of the business unit's products, services, processes, and systems to effectively challenge how the business unit identifies and manages the associated risks

  • Support the team leader in providing oversight on the business unit's implementation of enterprise-wide frameworks including but not limited to risk appetite, concentration risks, risk governance framework, etc.

Minimum Qualifications

  • Bachelor's or Master's degree in risk management, business administration, communications, public relations, or a related field.

  • 1+ years of experience in risk management functions.

  • Knowledge of risk management frameworks, regulatory landscape, and methodologies.

Preferred Qualifications

  • Strong attention to detail and ability to manage multiple tasks.

  • Experience developing Key Risk Indicators and Key Performance Indicators to measure risk management outcomes and risk profile or experience in the identifying risks and controls in financial institutions including RCSA.

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.

As part of Team Amex, you'll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Salary Range: $103,750.00 to $174,750.00 annually + bonus + benefits

The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we'll consider your location, experience, and other job-related factors.

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

  • Competitive base salaries 
  • Bonus incentives 
  • 6% Company Match on retirement savings plan 
  • Free financial coaching and financial well-being support 
  • Comprehensive medical, dental, vision, life insurance, and disability benefits 
  • Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need 
  • 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy 
  • Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) 
  • Free and confidential counseling support through our Healthy Minds program 
  • Career development and training opportunities

For a full list of Team Amex benefits, visit our Colleague Benefits Site.

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law. American Express will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable state and local laws, including, but not limited to, the California Fair Chance Act, the Los Angeles County Fair Chance Ordinance for Employers, and the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance. For positions covered by federal and/or state banking regulations, American Express will comply with such regulations as it relates to the consideration of applicants with criminal convictions.

We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.

US Job Seekers - Click to view the "Know Your Rights" poster. If the link does not work, you may access the poster by copying and pasting the following URL in a new browser window: https://www.eeoc.gov/poster

*Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.


What American Express employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom