ZipRecruiter

Log In

1

Security Risk Management Jobs in Chicago, IL (NOW HIRING)

Old National Bank

IST Risk Manager

Chicago, IL · On-site

$199K/yr

Governance, Risk & Compliance (GRC) - Information Security and Technology Risk Management Framework Ownership * Support the development, enhancement, and ongoing maintenance of the enterprise ...

West Monroe

Compliance Manager

Chicago, IL · On-site

Third-Party Risk Management and Vendor Security Assessments * Client Security Questionnaires and Assurance Programs * Security Policy Development and Governance Programs * Audit Coordination and ...

Sidley

AI Operational Risk Management Sr. Lead

Chicago, IL · Hybrid

$170K - $200K/yr

The AI Risk Management Senior Lead is a senior, cross-functional role responsible for owning the ... Collaborate with IT Security to ensure that SSO provisioning, endpoint controls, Netskope DLP ...

Pinkerton

Security Manager

Chicago, IL

$70K/yr

Security Manager Location US-IL-Chicago ID 2026-2948 Category Security Risk Management Position ... To do this, we provide enterprise risk management services and programs specifically designed for ...

CIBC

Consultant, Network Security & Governance

Chicago, IL · Hybrid

$130K - $155K/yr

Risk Management: Conduct risk-based assessments for new and existing cloud and network solutions, identify vulnerabilities, and recommend mitigation strategies. * Security Service Management: Build ...

CIBC

Consultant, Network Security & Governance

Chicago, IL · On-site

$130K - $155K/yr

Risk Management: Conduct risk-based assessments for new and existing cloud and network solutions, identify vulnerabilities, and recommend mitigation strategies. * Security Service Management: Build ...

next page

Showing results 1-20

All JobsSecurity Risk Management JobsSecurity Risk Management Jobs in Chicago, IL

Security Risk Management information

See Chicago, IL salary details

$10

$51

$72

How much do security risk management jobs pay per hour?

As of Jul 13, 2026, the average hourly pay for security risk management in Chicago, IL is $51.97, according to ZipRecruiter salary data. Most workers in this role earn between $42.12 and $61.97 per hour, depending on experience, location, and employer.

What are the typical challenges faced by professionals in Security Risk Management, and how can they be addressed?

Professionals in Security Risk Management often encounter challenges such as rapidly evolving threats, balancing security with business operations, and ensuring organization-wide compliance with regulations. Staying current with the latest risk trends and fostering cross-department collaboration are key strategies for overcoming these obstacles. Additionally, clear communication of risks to non-technical stakeholders and ongoing training are essential for building a proactive security culture and effective risk mitigation.

What is Security Risk Management?

Security Risk Management is the process of identifying, assessing, and mitigating risks to an organization's information, assets, and operations. It involves evaluating potential threats and vulnerabilities, determining their potential impact, and implementing strategies to minimize or control these risks. The goal is to protect the organization from security breaches, data loss, and other threats while ensuring compliance with legal and regulatory requirements. Security Risk Management is essential for maintaining business continuity and safeguarding reputation.

What are the key skills and qualifications needed to thrive in Security Risk Management, and why are they important?

To excel in Security Risk Management, you need a solid understanding of risk assessment frameworks, cybersecurity principles, and compliance standards, often supported by a degree in information security or related fields. Familiarity with risk management tools, security incident response systems, and certifications such as CISSP or CISM is typically required. Strong analytical thinking, communication, and decision-making skills help professionals navigate complex threats and collaborate across departments. These competencies are crucial for effectively identifying, mitigating, and communicating risks to protect organizational assets and ensure regulatory compliance.

What is the difference between Security Risk Management vs Security Analyst?

AspectSecurity Risk ManagementSecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentStrategic, policy-focused, risk assessmentOperational, monitoring, incident response
Employer & Industry UsageOrganizations managing enterprise security risksSecurity teams, cybersecurity firms, IT departments

Security Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy development and strategic planning. In contrast, Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. Both roles are essential but differ in scope and responsibilities within the cybersecurity field.

What are popular job titles related to Security Risk Management jobs in Chicago, IL? For Security Risk Management jobs in Chicago, IL, the most frequently searched job titles are:
What job categories do people searching Security Risk Management jobs in Chicago, IL look for? The top searched job categories for Security Risk Management jobs in Chicago, IL are:
Security Risk Management jobs near you
Infographic showing various Security Risk Management job openings in Chicago, IL as of July 2026, with employment types broken down into 1% As Needed, 81% Full Time, 15% Part Time, 1% Temporary, and 2% Contract. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution, with an average salary of $108,090 per year, or $52 per hour.
IST Risk Manager

IST Risk Manager

Old National Bank

Chicago, IL • On-site

$199K/yr

Full-time

Medical, Dental, Vision, Retirement

Posted 17 days ago

Old National Bank rating

8.1

Company rating: 8.1 out of 10

Based on 37 frontline employees who took The Breakroom Quiz

51st of 149 rated banks

Job description

Overview
Old National Bank has been serving clients and communities since 1834. With over $70 billion in total assets, we are a regional powerhouse deeply rooted in the communities we serve. As a trusted partner, we thrive on helping our clients achieve their goals and dreams, and we are committed to social responsibility and investing in our communities through volunteering and charitable giving.
We continually seek highly motivated and talented individuals as our people are critical to our success. In return, we offer competitive compensation with our salary and incentive program, in addition to medical, dental, and vision insurance. 401K, continuing education opportunities and an employee assistance program are also included in our benefit suite. Old National also offers a variety of Impact Network Groups led by team members who are passionate about driving engagement, creating awareness of diverse backgrounds and experiences, and building inclusion across the organization. We offer a unique opportunity to join a growing, community and client-focused company that is firmly rooted in its core values.
Responsibilities
Salary Range
The salary range for this position is $98,400/yr - $199,000/yr plus bonus. The base salary indicated for this position reflects the compensation range applicable to all levels of the role across the United States. Actual salary offers within this range may vary based on a number of factors, including the specific responsibilities of the position, the candidate's relevant skills and professional experience, educational qualifications, and geographic location.
The Information Security & Technology Risk Manager supports and executes second line of defense (2LOD) governance, oversight, and independent challenge across information security and technology risk at Old National Bancorp. Reporting to the Director of Information Security & Technology Risk, this role is responsible for establishing and maintaining the enterprise information security and technology risk framework, including policies, standards, and monitoring practices, to ensure alignment with Board-approved risk appetite and regulatory expectations.
This role supports the execution and continuous enhancement of the Information Security and Technology Risk Management Program, helping to safeguard the confidentiality, integrity, and availability of customer, employee, and business information in accordance with ONB policies and applicable regulatory requirements. The Manager serves as a consultative partner to both the first and second lines of defense, providing risk advisory and interpretation of regulatory expectations to business units and leadership.
Additionally, this role provides independent oversight of first-line technology and information security activities, leveraging strong analytical expertise and sound risk judgment to assess, challenge, and strengthen risk management practices and control effectiveness. Key responsibilities include overseeing governance, risk, and compliance (GRC) activities, leading independent testing and validation, and managing corporate security awareness initiatives.
Key Accountabilities
The Information Security and Technology Risk Manager and the second line team are directly responsible for enterprise oversight of Information Security and Technology Risk Management including but not limited to:
Governance, Risk & Compliance (GRC) - Information Security and Technology Risk Management Framework Ownership
  • Support the development, enhancement, and ongoing maintenance of the enterprise Information Security & Technology Risk Management (ISTRM) framework, including programs, policies, standards, guidelines, and procedures to ensure alignment with regulatory and industry expectations.
  • Contribute to the maintenance of technology and cyber risk taxonomy, risk appetite alignment, and key risk indicators (KRIs), supporting consistent risk measurement, monitoring, and reporting to management and Board committees.
  • Provide independent challenge and advisory support to first line risk offices and technology leadership on risk identification, control effectiveness, and remediation prioritization, while partnering with stakeholders to ensure timely issue identification and resolution.
  • Oversee adherence to information security and technology risk policies, programs, and standards, including monitoring control effectiveness and supporting continuous improvement of governance, risk analysis, and oversight practices.
  • Support the implementation of information security and technology risk governance, monitoring, and risk management activities, including security awareness initiatives, to promote a strong control environment and risk-aware culture.
  • Apply risk management practices to safeguard sensitive data and support compliance with applicable legal, regulatory, and industry requirements across information assets and technology systems.

Risk Identification, Assessment, Monitoring & Reporting (2LOD)
  • Execute and oversee second line monitoring and review activities using a risk-based approach, including validation of control design and operating effectiveness performed by first line teams.
  • Maintain and support governance of risk registers, issue inventories, and exception tracking within the enterprise GRC platform; ensure appropriate documentation, escalation, and reporting cadence.
  • Develop and deliver clear, concise risk reporting for management and risk committees, including trends, material findings, and aging issues/exceptions.

Independent Testing & Validation (Assurance within 2LOD)
  • Establish and execute an annual independent testing and validation plan across information security and technology risk domains, informed by risk assessments, regulatory expectations, and audit/exam feedback.
  • Perform independent validation of remediation for material issues and control deficiencies; confirm evidence sufficiency and recommend formal closure or escalation where gaps remain.
  • Coordinate with Internal Audit (3LOD) and external examiners to align testing scopes, reduce duplication, and ensure timely resolution of findings.

Security Training, Awareness & Culture
  • Manage and enhance enterprise security training and awareness activities, including administration of required training and tracking of completion metrics.
  • Monitor alignment of enterprise training and awareness efforts with regulatory expectations and evolving threat landscape; report on participation and identified gaps.
  • Partner with HR, Compliance, and business units to promote a consistent and risk-aware culture across the organization.

Regulatory, Audit & Committee Engagement
  • Support regulatory examinations and audits related to information security, technology risk, and resilience by providing documentation, evidence, and responses as needed.
  • Contribute to preparation of management and committee reporting materials, including risk posture updates and tracking of action items.
  • Collaborate with Technology, Information Security (1LOD), ERM, Compliance, TPRM, and Legal to support practical and effective governance and risk management practices.

Key Competencies for Position
People Leadership:
  • Coach & Empower Others: Provides timely feedback, support, and guidance to encourage and support associates to accomplish tasks, solve problems, and enhance their professional development.
  • Lead Change: Leads change efforts, engaging team members who are resistant to change to gain their support and commitment, helps associates understand why the change is occurring, continuously sharing information, and assessing the adoption of the change.

Culture Leadership:
  • Culture & Values Leadership: Demonstrates Old National's culture in daily interactions and encourages associates to live by our culture and core values.

Execution Leadership:
  • Drive and Execution: Establishes clear objectives, metrics, and governance cadence; delivers risk oversight commitments with rigor and follow-through.
  • Collaboration: Builds trusted partnerships across Risk, Technology, Security, Compliance, and the business to drive consistent risk outcomes.
  • Risk Leadership / Independent Challenge: Demonstrates credibility and judgment to challenge first line decisions, validate evidence, and escalate material risks appropriately.
  • Communication: Communicates complex risk and control topics clearly to executive management and governance committees; ensures timely escalation and stakeholder alignment.
  • Analytical Problem Solving: Synthesizes qualitative and quantitative risk data to identify themes, prioritize actions, and recommend pragmatic risk responses.

Qualifications and Education Requirements
  • Bachelor degree in Information Technology, Cybersecurity, Risk Management, Audit, or related field (advanced degree preferred).
  • 10+ years relevant experience across information security, technology risk, governance, risk, and compliance (GRC), or related disciplines in a highly regulated industry, with a minimum of 3 years managing teams.
  • 3+ years of management experience.
  • Demonstrated experience aligning security and technology risk governance to recognized frameworks (e.g., NIST, ISO 27001) and banking regulatory expectations.
  • Experience establishing risk monitoring, independent testing/validation, and issue/exception governance processes with strong evidence discipline.
  • Strong communication skills; experience presenting risk posture, trends, and recommendations to management committees.
  • Proven ability to partner effectively across all levels of the organization and develop positive working relationships.
  • Strong presence with internal partners and external constituents, as necessary
  • Thorough understanding of auditing/examination techniques. Knowledge of applicable state and federal banking laws and regulations and of bank services, policies, and procedures.
  • Demonstrates conceptual thinking and analytical skills. Advanced problem-solving skills with the ability to define problems, analyze variables and propose solutions.
  • Strong leadership skills with supervisory experience, strong interpersonal skills and knowledgeable risk management professional.

Preferred certifications:
  • CISSP, CISM, CISA, CRISC, or equivalent.

Old National is proud to be an equal opportunity employer focused on fostering an inclusive workplace and committed to hiring a workforce comprised of diverse backgrounds, cultures and thinking styles.
As such, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, status as a qualified individual with disability, sexual orientation, gender identity or any other characteristic protected by law.
We do not accept resumes from external staffing agencies or independent recruiters for any of our openings unless we have an agreement signed by the Director of Talent Acquisition, SVP, to fill a specific position.
Our culture is firmly rooted in our core values.
We are optimistic. We are collaborative. We are inclusive. We are agile. We are ethical.
We are Old National Bank. Join our team!

What Old National Bank employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply