ZipRecruiter

Log In

1

Security Risk Management Jobs (NOW HIRING)

Xcel Energy

Principal Security Risk Analyst

Denver, CO · On-site

$97K - $138K/yr

Manage and execute risk identification, assessment and quantification, aggregation reporting, and ... Coordinates the security risk program efforts including risk modeling, comprehensive periodic risk ...

eBay, Inc.

Information Security Risk Manager

San Jose, CA · On-site

$172K - $229K/yr

Coordinate with Enterprise Risk Management, Internal Audit and other groups responsible for risk management areas * Use industry resources and security domain experts to develop industry leading risk ...

Xcel Energy

Principal Security Risk Analyst

Minneapolis, MN · On-site

$97K - $138K/yr

Manage and execute risk identification, assessment and quantification, aggregation reporting, and ... Coordinates the security risk program efforts including risk modeling, comprehensive periodic risk ...

blueStone

Security/Risk Analyst

Appleton, WI

In your role as a Security/Risk Analyst, you will architect, develop, implement and manage IS policy and procedures. As a Sr. Security/Risk Analyst you will engage your security/risk initiatives and ...

Ourhrconnect

IS Security Risk Analyst III

Columbia, SC

... Security Risk Exception process, to ensure identification of areas of non-compliance. Utilize tools ... Advise senior management of critical issues that may affect organization. * Research emerging ...

New

Fastly

Security Risk Lead

Denver, NY

Security Risk Lead Fastly helps people stay better connected with the things they love. Fastly ... Experience using governance, risk management, and compliance (GRC) tools preferred Work Hours:

next page

Showing results 1-20

All JobsSecurity Risk Management Jobs

Security Risk Management information

See salary details

$10

$50

$69

How much do security risk management jobs pay per hour?

As of Jun 19, 2026, the average hourly pay for security risk management in the United States is $50.41, according to ZipRecruiter salary data. Most workers in this role earn between $40.87 and $60.10 per hour, depending on experience, location, and employer.

What are the typical challenges faced by professionals in Security Risk Management, and how can they be addressed?

Professionals in Security Risk Management often encounter challenges such as rapidly evolving threats, balancing security with business operations, and ensuring organization-wide compliance with regulations. Staying current with the latest risk trends and fostering cross-department collaboration are key strategies for overcoming these obstacles. Additionally, clear communication of risks to non-technical stakeholders and ongoing training are essential for building a proactive security culture and effective risk mitigation.

Can I make $200,000 a year in cyber security?

Security Risk Management professionals can potentially earn $200,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and roles in high-demand industries or senior leadership positions. Salary levels vary based on location, company size, and individual expertise, but high-level cybersecurity roles often offer compensation in this range.

Can you make $500,000 a year in cyber security?

Security Risk Management professionals can potentially earn $500,000 or more annually, especially at senior levels, in leadership roles, or within large organizations. Achieving this income typically requires extensive experience, advanced certifications like CISSP or CISM, and expertise in high-demand areas such as threat intelligence or security architecture.

Is security risk management a good career?

Security risk management is a viable career that involves identifying, assessing, and mitigating security threats to organizations. It often requires certifications such as CISSP or CISM and skills in risk analysis, security policies, and incident response. The field offers opportunities across various industries with increasing demand for cybersecurity expertise.

What is Security Risk Management?

Security Risk Management is the process of identifying, assessing, and mitigating risks to an organization's information, assets, and operations. It involves evaluating potential threats and vulnerabilities, determining their potential impact, and implementing strategies to minimize or control these risks. The goal is to protect the organization from security breaches, data loss, and other threats while ensuring compliance with legal and regulatory requirements. Security Risk Management is essential for maintaining business continuity and safeguarding reputation.

What are the key skills and qualifications needed to thrive in Security Risk Management, and why are they important?

To excel in Security Risk Management, you need a solid understanding of risk assessment frameworks, cybersecurity principles, and compliance standards, often supported by a degree in information security or related fields. Familiarity with risk management tools, security incident response systems, and certifications such as CISSP or CISM is typically required. Strong analytical thinking, communication, and decision-making skills help professionals navigate complex threats and collaborate across departments. These competencies are crucial for effectively identifying, mitigating, and communicating risks to protect organizational assets and ensure regulatory compliance.

What is the difference between Security Risk Management vs Security Analyst?

AspectSecurity Risk ManagementSecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentStrategic, policy-focused, risk assessmentOperational, monitoring, incident response
Employer & Industry UsageOrganizations managing enterprise security risksSecurity teams, cybersecurity firms, IT departments

Security Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy development and strategic planning. In contrast, Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. Both roles are essential but differ in scope and responsibilities within the cybersecurity field.

Is SOC 1 entry level?

SOC 1 (Service Organization Control 1) reports are audit reports used to evaluate internal controls at a service organization and are not job roles. In the context of security risk management, entry-level positions typically require foundational knowledge of security principles, certifications like CompTIA Security+ or CISSP, and experience with risk assessment tools, but SOC 1 itself is not an entry-level role.
More about Security Risk Management jobs
What cities are hiring for Security Risk Management jobs? Cities with the most Security Risk Management job openings:
What states have the most Security Risk Management jobs? States with the most job openings for Security Risk Management jobs include:
What job categories do people searching Security Risk Management jobs look for? The top searched job categories for Security Risk Management jobs are:
Security Risk Management jobs near you
Infographic showing various Security Risk Management job openings in the United States as of June 2026, with employment types broken down into 3% As Needed, 91% Full Time, and 6% Part Time. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $104,848 per year, or $50.4 per hour.
EITS Security Risk Analyst B (Engagement)--Remote Job

EITS Security Risk Analyst B (Engagement)--Remote Job

DELTASOFT SOLUTIONS LLC

San Francisco, CA • Remote

$60 - $70/hr

Full-time

Posted 4 hours ago

Job description

Job43 EITS Security Risk Analyst B (Engagement)
Location: 100% Remote
Max Submissions: 5
Proposed Start Date: ASAP
Proposed End Date: 06/30/2026
Role Overview
  • Serve as a liaison between the CISOs strategic initiatives and the IT operational teams.
  • Translate business IT risk requirements into technical control specifications.
  • Develop risk metrics for performance measurement and reporting.
  • Coordinate enterprise-level security and risk management efforts.
  • Act as a subject matter expert (SME) on information security and regulatory compliance.

Key Responsibilities
Security & Risk Management
  • Maintain and enforce the enterprise information security and risk management framework.
  • Conduct risk analysis and develop mitigation strategies.
  • Monitor and assess the enterprise threat landscape.
  • Provide realistic risk reporting to the CISO and leadership teams.
  • Track and document internal risk reviews, assessments, and exceptions using a GRC tool.

Governance & Compliance
  • Document and maintain risk governance methodologies, policies, and procedures.
  • Ensure compliance with:
    • HIPAA
    • Joint Commission
    • DSRIP
    • COBIT
    • State privacy laws
  • Conduct and support internal and external audits (operational, compliance, reputational, security).
  • Serve as SME for EMR and PHI-related security risks.

Risk Assessments & Gap Analysis
  • Perform enterprise security risk assessments and gap analyses for new technologies and products.
  • Develop and manage risk remediation plans and work plans.
  • Identify information asset owners for data classification initiatives.
  • Support risk exception and risk acceptance documentation processes.

Technical & Cross-Functional Collaboration
  • Partner with enterprise architecture teams to align business, technical, and security requirements.
  • Collaborate with security engineering teams to implement security controls.
  • Facilitate meetings between stakeholders and IT teams.
  • Provide written and verbal reports to leadership and committees (including Operational Risk Committee).

Required Qualifications
Experience
  • Minimum 7 years of IT experience
  • At least 5 years in IT Security Risk Management / Risk Audit / Data Privacy Investigation
  • Minimum 2 years in a supervisory capacity

Healthcare Industry Expertise (Required)
  • Strong understanding of:
    • EMR systems
    • PHI data privacy
    • Healthcare regulatory environment
  • Experience with HIPAA, Joint Commission, CMS regulations

GRC & Security Framework Knowledge
  • Hands-on experience with GRC tools (ServiceNow, Archer, MetricStream preferred)
  • Working knowledge of:
    • NIST CSF
    • HITECH
    • ISO 27001/27002
    • PCI DSS
    • COBIT

Technical Skills
  • Experience reviewing IT solution requirements and implementing security controls
  • Strong analytical and risk assessment skills
  • Ability to design compensating controls for security vulnerabilities
  • Ability to assess business impact of security tools and policies

Education & Certifications
  • Bachelors degree in Information Systems or related field
  • Preferred Certifications:
    • CISSP
    • CISA
    • CRISC
    • Other relevant security certifications

Preferred Soft Skills
  • High integrity and ability to work independently
  • Strong communication and reporting skills
  • Ability to work in fast-moving environments
  • Experience participating in special projects
  • Ability to support various locations and flexible shifts if required

Thanks & Regards
Bhanu Prakash
DeltaSoft Solutions
bhanu.prakash@deltasoftgroup.com