1

Security Risk Management Jobs (NOW HIRING)

This role will support GIS in ensuring that security risk management practices are uniformly and appropriately incorporated into DLL. Day to day: The Security Risk Officer fulfills the following ...

With intelligent agreement management, Docusign unleashes business-critical data that is trapped ... In this hands-on role, you will lead modern, data-driven security risk assessments and play a ...

Developing an agency Information Security Risk Management Strategy in accordance with the latest released versions of NIST Special Publications (SPs) such as SP 800-37, Risk Management Framework for ...

Developing an agency Information Security Risk Management Strategy in accordance with the latest released versions of NIST Special Publications (SPs) such as SP 800-37, Risk Management Framework for ...

Developing an agency Information Security Risk Management Strategy in accordance with the latest released versions of NIST Special Publications (SPs) such as SP 800-37, Risk Management Framework for ...

Developing an agency Information Security Risk Management Strategy in accordance with the latest released versions of NIST Special Publications (SPs) such as SP 800-37, Risk Management Framework for ...

Security Risk Management * Conduct security risk assessments for technologies, business initiatives, vendors, and emerging risks. * Maintain Security-owned risks within the enterprise risk management ...

Senior Risk Management Specialist

Austin, TX · On-site

$97K/yr

The client is looking for Risk Management Specialist with experience in information security or cyber risk to lead the design, implementation, and optimization of enterprise and third-party risk ...

next page

Showing results 1-20

Security Risk Management information

See salary details

$10

$50

$69

How much do security risk management jobs pay per hour?

As of Jun 19, 2026, the average hourly pay for security risk management in the United States is $50.41, according to ZipRecruiter salary data. Most workers in this role earn between $40.87 and $60.10 per hour, depending on experience, location, and employer.

What are the typical challenges faced by professionals in Security Risk Management, and how can they be addressed?

Professionals in Security Risk Management often encounter challenges such as rapidly evolving threats, balancing security with business operations, and ensuring organization-wide compliance with regulations. Staying current with the latest risk trends and fostering cross-department collaboration are key strategies for overcoming these obstacles. Additionally, clear communication of risks to non-technical stakeholders and ongoing training are essential for building a proactive security culture and effective risk mitigation.

Can I make $200,000 a year in cyber security?

Security Risk Management professionals can potentially earn $200,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and roles in high-demand industries or senior leadership positions. Salary levels vary based on location, company size, and individual expertise, but high-level cybersecurity roles often offer compensation in this range.

Can you make $500,000 a year in cyber security?

Security Risk Management professionals can potentially earn $500,000 or more annually, especially at senior levels, in leadership roles, or within large organizations. Achieving this income typically requires extensive experience, advanced certifications like CISSP or CISM, and expertise in high-demand areas such as threat intelligence or security architecture.

Is security risk management a good career?

Security risk management is a viable career that involves identifying, assessing, and mitigating security threats to organizations. It often requires certifications such as CISSP or CISM and skills in risk analysis, security policies, and incident response. The field offers opportunities across various industries with increasing demand for cybersecurity expertise.

What is Security Risk Management?

Security Risk Management is the process of identifying, assessing, and mitigating risks to an organization's information, assets, and operations. It involves evaluating potential threats and vulnerabilities, determining their potential impact, and implementing strategies to minimize or control these risks. The goal is to protect the organization from security breaches, data loss, and other threats while ensuring compliance with legal and regulatory requirements. Security Risk Management is essential for maintaining business continuity and safeguarding reputation.

What are the key skills and qualifications needed to thrive in Security Risk Management, and why are they important?

To excel in Security Risk Management, you need a solid understanding of risk assessment frameworks, cybersecurity principles, and compliance standards, often supported by a degree in information security or related fields. Familiarity with risk management tools, security incident response systems, and certifications such as CISSP or CISM is typically required. Strong analytical thinking, communication, and decision-making skills help professionals navigate complex threats and collaborate across departments. These competencies are crucial for effectively identifying, mitigating, and communicating risks to protect organizational assets and ensure regulatory compliance.

What is the difference between Security Risk Management vs Security Analyst?

AspectSecurity Risk ManagementSecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentStrategic, policy-focused, risk assessmentOperational, monitoring, incident response
Employer & Industry UsageOrganizations managing enterprise security risksSecurity teams, cybersecurity firms, IT departments

Security Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy development and strategic planning. In contrast, Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. Both roles are essential but differ in scope and responsibilities within the cybersecurity field.

Is SOC 1 entry level?

SOC 1 (Service Organization Control 1) reports are audit reports used to evaluate internal controls at a service organization and are not job roles. In the context of security risk management, entry-level positions typically require foundational knowledge of security principles, certifications like CompTIA Security+ or CISSP, and experience with risk assessment tools, but SOC 1 itself is not an entry-level role.
More about Security Risk Management jobs
What cities are hiring for Security Risk Management jobs? Cities with the most Security Risk Management job openings:
What states have the most Security Risk Management jobs? States with the most job openings for Security Risk Management jobs include:
Infographic showing various Security Risk Management job openings in the United States as of June 2026, with employment types broken down into 3% As Needed, 91% Full Time, and 6% Part Time. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $104,848 per year, or $50.4 per hour.
AVP- Information Security Risk Management

AVP- Information Security Risk Management

Premium Technology

New York, NY

Full-time

Posted 22 days ago


Job description

Company Description

A Major International Bank in Midtown Manhattan is seeking an AVP of Information Security Risk Management.

 

Job Description

Fluency in Mandarin is required due to the nature of the Position/Client
CANDIDATES LOCAL TO THE NY/NJ METRO AREA ONLY. NO RE-LOCATION
FULL NAME AND CONTACT INFORMATION MUST BE INCLUDED ON THE RESUME

Job Description

  • responsible for the day-to-day operation of the Bank's information security systems. This includes its organization, installation, support, and the validation and escalation of alerts when applicable.
  • provide security, stability and reliability to all security infrastructure, policies and operations. Duties include security architecture reviews, the coordination of security projects, security monitoring and remediation, training, security alert notification and response and internal and external audits. Qualifications:

Qualifications
     Have a Bachelor Degree or Master Degree of major in information technology/computer science
Have at least 5 years of relevant experience (information security/vulnerability management/security architecture/network and computer systems administration) in the financial services industry.
    Experiences in systems administration such as Windows Server, Active Directory management, working with security tools like Nitro, Palo Alto and McAfee and in designing secure systems, assessing the validity of identified vulnerabilities are highly desirable.
    Bilingual abilities in Chinese and English
Additional Information