ZipRecruiter

Log In

1

Security Risk Management Jobs in Austin, TX (NOW HIRING)

Procore

Senior Analyst, GRC

Austin, TX · On-site

Focused on technical risk management, you'll be a key partner to security, engineering, IT, and business teams to assess and manage security risks across our information asset ecosystem. This role is ...

Procore

Senior Analyst, GRC

Austin, TX · On-site

Focused on technical risk management, you'll be a key partner to security, engineering, IT, and business teams to assess and manage security risks across our information asset ecosystem. This role is ...

Procore

Senior Analyst, GRC

Austin, TX · On-site

Focused on technical risk management, you'll be a key partner to security, engineering, IT, and business teams to assess and manage security risks across our information asset ecosystem. This role is ...

Ampcus Inc

Network Security Analyst 1

Austin, TX · On-site

... high-risk vulnerabilities. Responsibilities : • Review, triage, and manage vulnerability ... Security risk and urgency, Scope and impacted systems, Remediation approach, Testing and validation ...

Apple

Senior Security Engineer

Austin, TX

$184K - $277K/yr

We are seeking an experienced Security Engineer to play a pivotal role in shaping the security ... proactive risk management. Our scope spans all of Apple's application and infrastructure ...

Apple

Senior Security Engineer

Austin, TX

$184K - $277K/yr

We are seeking an experienced Security Engineer to play a pivotal role in shaping the security ... proactive risk management. Our scope spans all of Apple's application and infrastructure ...

Apple

Senior Security Engineer

Austin, TX

$184K - $277K/yr

We are seeking an experienced Security Engineer to play a pivotal role in shaping the security ... proactive risk management. Our scope spans all of Apple's application and infrastructure ...

6Sense

Sr. Security Assurance Engineer

Austin, TX · On-site

$141 - $180/hr

Director, Security Assurance Function/Dept: Business Technology / Security Purpose of the Job As ... GRC enforces governance, implements risk management strategies, and ensures compliance through ...

Deloitte

AI Security Engineer Manager

Austin, TX

Risk & Compliance * Identity & Access Management * Data Protection * Cyber Design * Incident Response * Security Architecture * Business Partnership Qualifications Required: * Bachelor's degree or ...

previous page

Showing results 41-60

All JobsSecurity Risk Management JobsSecurity Risk Management Jobs in Austin, TX

Security Risk Management information

See Austin, TX salary details

$10

$49

$69

How much do security risk management jobs pay per hour?

As of Sep 6, 2026, the average hourly pay for security risk management in Austin, TX is $49.95, according to ZipRecruiter salary data. Most workers in this role earn between $40.48 and $59.57 per hour, depending on experience, location, and employer.

What is security risk management?

Security Risk Management is the process of identifying, assessing, and mitigating risks to an organization's information, assets, and operations. It involves evaluating potential threats and vulnerabilities, determining their potential impact, and implementing strategies to minimize or control these risks. The goal is to protect the organization from security breaches, data loss, and other threats while ensuring compliance with legal and regulatory requirements. Security Risk Management is essential for maintaining business continuity and safeguarding reputation.

What are the key skills and qualifications needed to thrive in security risk management, and why are they important?

To excel in Security Risk Management, you need a solid understanding of risk assessment frameworks, cybersecurity principles, and compliance standards, often supported by a degree in information security or related fields. Familiarity with risk management tools, security incident response systems, and certifications such as CISSP or CISM is typically required. Strong analytical thinking, communication, and decision-making skills help professionals navigate complex threats and collaborate across departments. These competencies are crucial for effectively identifying, mitigating, and communicating risks to protect organizational assets and ensure regulatory compliance.

What are the typical challenges faced by professionals in security risk management, and how can they be addressed?

Professionals in Security Risk Management often encounter challenges such as rapidly evolving threats, balancing security with business operations, and ensuring organization-wide compliance with regulations. Staying current with the latest risk trends and fostering cross-department collaboration are key strategies for overcoming these obstacles. Additionally, clear communication of risks to non-technical stakeholders and ongoing training are essential for building a proactive security culture and effective risk mitigation.

What is the difference between Security Risk Management vs Security Analyst?

AspectSecurity Risk ManagementSecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentStrategic, policy-focused, risk assessmentOperational, monitoring, incident response
Employer & Industry UsageOrganizations managing enterprise security risksSecurity teams, cybersecurity firms, IT departments

Security Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy development and strategic planning. In contrast, Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. Both roles are essential but differ in scope and responsibilities within the cybersecurity field.

What do you need to be a security risk manager?

A security risk manager typically needs a bachelor's degree in security management, information technology, or a related field, along with experience in security or risk assessment. Certifications such as Certified Information Systems Security Professional (CISSP) or Certified Risk and Information Systems Control (CRISC) can enhance qualifications. Strong analytical skills, knowledge of security protocols, and familiarity with risk management tools are also important for the role.

What does security risk management do?

Security risk management involves identifying, assessing, and prioritizing potential security threats to an organization, then implementing measures to mitigate or eliminate those risks. Professionals in this field analyze vulnerabilities, develop security policies, and often use tools like risk assessment frameworks and security audits to protect assets and ensure safety.

What are popular job titles related to Security Risk Management jobs in Austin, TX?

For Security Risk Management jobs in Austin, TX, the most frequently searched job titles are:

What job categories do people searching Security Risk Management jobs in Austin, TX look for?

The top searched job categories for Security Risk Management jobs in Austin, TX are:

What cities near Austin, TX are hiring for Security Risk Management jobs?

Cities near Austin, TX with the most Security Risk Management job openings:

Security Risk Management jobs near you
Infographic showing various Security Risk Management job openings in Austin, TX as of August 2026, with employment types broken down into 1% As Needed, 82% Full Time, 14% Part Time, and 3% Contract. Highlights an 82% Physical, 2% Hybrid, and 16% Remote job distribution, with an average salary of $103,901 per year, or $50 per hour.

Senior Analyst, GRC

Procore

Austin, TX • On-site

Full-time

Posted 16 days ago

Key responsibilities

  • Manage individual risks throughout the entire risk lifecycle, including assessment, scoring, treatment, acceptance, and closure.

  • Bring findings from pen tests, audits, vulnerability scans, and configuration reviews onto the risk register, grouping related issues into root-cause risks and tracking exceptions.

  • Evaluate risks and configuration issues across cloud and SaaS environments, translating them into clear, actionable risk statements with defensible severity.

Job description

We're looking for a highly motivated and detail-oriented Senior Cybersecurity Risk Analyst to join our Governance, Risk, and Compliance (GRC) organization. Focused on technical risk management, you'll be a key partner to security, engineering, IT, and business teams to assess and manage security risks across our information asset ecosystem.


This role is designed for a self-driven, critical thinker who views AI as a force multiplier. Our program tracks risks and exceptions: findings from pen tests, audits, and scans are grouped under the bigger risks they point to so we address the root cause, and escalated exceptions are tracked so items stay visible even when they're accepted. You won't just follow a risk manual, you'll use new technologies and tools to synthesize complex technical data, accelerate risk assessments, and provide the business with high-accuracy insights. You'll play a key role in the entire risk journey. This position reports to our Director, GRC.

WHAT YOU'LL DO:

  • End-to-End Risk Lifecycle Management: Manage individual risks end to end, including assessment, scoring, treatment tracking, risk acceptance, and closure. Apply qualitative methods and partner with GRC leadership to validate risk levels against appetite and set priority.

  • Issues/Findings-to-Risk Mapping: Bring findings from pen tests, audits, vulnerability scans, issue management, data protection, and configuration reviews onto the register. Combine related discoveries into root-cause risks with a treatment plan, and track severe accepted or untreated items as exceptions so they stay visible until the risk changes.

  • Risk-to-Control Mapping: Map each risk to the controls that mitigate it so that treatment plans, control gaps, and framework alignment (ISO/IEC 27001, SOC 2, NIST CSF / 800-53) all draw from the same picture. Recommend best-practice controls and treatment options where gaps exist.

  • Technical Risk Assessment: Evaluate risks and configuration issues across our cloud and SaaS ecosystem, including IAM, network security, vulnerability findings, and pen test results, and translate them into clear, actionable risk statements with defensible severity.

  • Partnerships: You'll work directly with architects, engineering, Security, IT, system owners, and business stakeholders to validate severity, agree on treatment, and keep entries current.

  • Data Quality Ownership: Keep the risk register complete, current, consistent, and defensible. You'll catch stale entries, unclear ownership, and scoring drift before they reach a report.

  • AI-Powered Operations: Use AI tooling daily to accelerate risk statement drafting, evidence summarization, scenario modeling, and reporting, and look for new opportunities to automate manual GRC work.

WHAT WE ARE LOOKING FOR:

  • Experience: 6+ years in security risk management, GRC, or cybersecurity, with hands-on exposure to cloud environments. Demonstrated experience managing risk above the individual finding level, including aggregating related issues into broader risks, driving systemic treatment, and measuring residual risk.

  • The AI Edge: Current, hands-on AI fluency. You use LLMs in your daily work, can structure prompts that produce accurate and repeatable outputs, and understand failure modes like hallucination and data privacy well enough to know when to double-check results.

  • Data Quality Mindset: Strong attention to data quality. You spot stale records, inconsistent scores, and unclear ownership, and you improve the process that let them happen.

  • Tooling Fluency: Comfortable with Jira and Google Workspace (Sheets, Docs, Slides) as daily working tools, from running workflows in Jira to building analysis and reporting artifacts in Google.

  • Stakeholder Partnership: A track record of working well with technical and business teams, including engineers, offensive security, IT, and system owners, and building credibility with partners you don't have authority over.

  • Independent Contributor: We are a lean team, so you'll work with real autonomy. Proven ability to work independently, take ownership of tasks, prioritize effectively, and raise blockers early in a fast-moving environment with evolving architectures.

  • Technical Knowledge: Able to read network diagrams, vulnerability reports, and pen test findings, understand attack paths, and engage confidently with Security Architects and SecOps engineers. Working knowledge of cloud infrastructure security (AWS, GCP, or Azure) and at least one security framework (ISO 27001, SOC 2, or NIST CSF / NIST 800-53). You know common security controls well enough to recommend appropriate treatments based on best practice, even though deep implementation expertise sits with the engineering teams.

  • Communication: Strong writing and presentation skills, with the ability to explain technical issues to non-technical audiences and walk business stakeholders through risk data in live meetings.

  • Preferred

    • Experience in high-growth SaaS or cloud-native environments

    • Familiarity with DevOps and CI/CD security controls

    • Experience with modern GRC platforms and integrating AI tooling into daily workflows

    • Certifications such as CRISC, CISM, CISSP, or cloud provider certifications.


Additional Information

Base Pay Range:

111,760.00 - 153,670.00 USD Annual

This role may also be eligible for Equity Compensation and/or Bonus Incentive Compensation. Procore is committed to offering competitive, fair, and commensurate compensation. Actual compensation will be based on a candidate's job-related skills, experience, education or training, and location.

For Los Angeles County (unincorporated) Candidates:

Procore will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable federal, state, and local laws, including the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.

A criminal history may have a direct, adverse, and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. appropriately managing, accessing, and handling confidential information including proprietary and trade secret information, as well as accessing Procore's information technology systems and platforms; 2. interacting with and occasionally having unsupervised contact with internal/external customers, stakeholders, and/or colleagues; and 3. exercising sound judgment.

Apply