ZipRecruiter

Log In

1

Security Risk Management Jobs (NOW HIRING)

Hireblazer

Senior Risk Management Specialist

Austin, TX · On-site

$97K/yr

The client is looking for Risk Management Specialist with experience in information security or cyber risk to lead the design, implementation, and optimization of enterprise and third-party risk ...

eBay, Inc.

Information Security Risk Manager

San Jose, CA · On-site

$172K - $229K/yr

Coordinate with Enterprise Risk Management, Internal Audit and other groups responsible for risk management areas * Use industry resources and security domain experts to develop industry leading risk ...

blueStone

Security/Risk Analyst

Appleton, WI

In your role as a Security/Risk Analyst, you will architect, develop, implement and manage IS policy and procedures. As a Sr. Security/Risk Analyst you will engage your security/risk initiatives and ...

Grow Therapy

Senior/Staff TPM, Security Risk

New York, NY · On-site

$152K - $241K/yr

The Opportunity We are looking for a Security Risk Program Manager to take Grow Therapy's security risk program to the next level of maturity. Reporting directly to the Head of Security, you'll be ...

next page

Showing results 1-20

All JobsSecurity Risk Management Jobs

Security Risk Management information

See salary details

$10

$50

$69

How much do security risk management jobs pay per hour?

As of Jul 10, 2026, the average hourly pay for security risk management in the United States is $50.41, according to ZipRecruiter salary data. Most workers in this role earn between $40.87 and $60.10 per hour, depending on experience, location, and employer.

What are the typical challenges faced by professionals in Security Risk Management, and how can they be addressed?

Professionals in Security Risk Management often encounter challenges such as rapidly evolving threats, balancing security with business operations, and ensuring organization-wide compliance with regulations. Staying current with the latest risk trends and fostering cross-department collaboration are key strategies for overcoming these obstacles. Additionally, clear communication of risks to non-technical stakeholders and ongoing training are essential for building a proactive security culture and effective risk mitigation.

What is Security Risk Management?

Security Risk Management is the process of identifying, assessing, and mitigating risks to an organization's information, assets, and operations. It involves evaluating potential threats and vulnerabilities, determining their potential impact, and implementing strategies to minimize or control these risks. The goal is to protect the organization from security breaches, data loss, and other threats while ensuring compliance with legal and regulatory requirements. Security Risk Management is essential for maintaining business continuity and safeguarding reputation.

What are the key skills and qualifications needed to thrive in Security Risk Management, and why are they important?

To excel in Security Risk Management, you need a solid understanding of risk assessment frameworks, cybersecurity principles, and compliance standards, often supported by a degree in information security or related fields. Familiarity with risk management tools, security incident response systems, and certifications such as CISSP or CISM is typically required. Strong analytical thinking, communication, and decision-making skills help professionals navigate complex threats and collaborate across departments. These competencies are crucial for effectively identifying, mitigating, and communicating risks to protect organizational assets and ensure regulatory compliance.

What is the difference between Security Risk Management vs Security Analyst?

AspectSecurity Risk ManagementSecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentStrategic, policy-focused, risk assessmentOperational, monitoring, incident response
Employer & Industry UsageOrganizations managing enterprise security risksSecurity teams, cybersecurity firms, IT departments

Security Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy development and strategic planning. In contrast, Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. Both roles are essential but differ in scope and responsibilities within the cybersecurity field.

More about Security Risk Management jobs
What cities are hiring for Security Risk Management jobs? Cities with the most Security Risk Management job openings:
What states have the most Security Risk Management jobs? States with the most job openings for Security Risk Management jobs include:
What job categories do people searching Security Risk Management jobs look for? The top searched job categories for Security Risk Management jobs are:
Security Risk Management jobs near you
Infographic showing various Security Risk Management job openings in the United States as of July 2026, with employment types broken down into 1% As Needed, 82% Full Time, 14% Part Time, 1% Temporary, and 2% Contract. Highlights an 88% Physical, 2% Hybrid, and 10% Remote job distribution, with an average salary of $104,848 per year, or $50.4 per hour.
Senior Risk Management Specialist

Senior Risk Management Specialist

Hireblazer

Austin, TX • On-site

$97K/yr

Contractor

Re-posted 12 days ago

Job description

Role: Senior Risk Management Specialist

Expected Duration: 22 Months

Location: Austin, TX (Hybrid. Candidate must be local to Austin, TX)

Summary:

The client is looking for Risk Management Specialist with experience in information security or cyber risk to lead the design, implementation, and optimization of enterprise and third-party risk management programs.

Responsibilities include (but are not limited to):

  • Evaluate, implement, and enhance enterprise and third-party risk management programs to align with organizational goals and standards.
  • Configure risk tools, integrate with existing systems, and apply governance standards including TAC 202, TX-RAMP, and TCF.
  • Prepare reports, define metrics, and communicate risk reduction strategies to assess and improve program effectiveness.

Minimum Candidate Characteristics:

  • 6+ years of experience designing and deploying security platforms, analytics, and risk programs across federated governance environments.
  • Skilled in coordinating interagency efforts and program reviews across diverse operational settings.
  • Experience simplifying regulatory requirements and risk strategies for executive audiences and converting mandates (e.g., TAC 202, TX-RAMP) into actionable assessments.

Exceptional Candidate Characteristics

  • Experience with one or more Texas State Agencies

Responsibilities:

  • Perform advanced (senior-level) risk management work. Works under minimal supervision, with extensive latitude for the use of initiative and independent judgement. Resources at this level may independently perform the most complex risk management work and may:
  • Evaluate and optimize risk prevention, reduction, retention, transfer, and control measures through program reviews and coordinated interagency risk management programs to ensure alignment with organizational goals.
  • Lead in implementation and configuration of information security risk platform, integration with existing platforms, development of reporting and analytics capabilities, and alignment with governance standards and frameworks.
  • Directly support the design, development, and evaluation of enterprise risk management and third-party risk programs and guidelines.
  • Adapt Texas specific controls and frameworks (TCF, TAC 202, and TXRAMP) into standardized, established risk assessment ranking and prioritization rubrics.
  • Apply expertise in information security risk reduction, measurement, and communication in support of procedures and milestones to measure the effectiveness and performance of risk management programs.
  • Prepare technical and comprehensive reports, plans, and procedures for developing risk management programs, reviews, and inspections.

Other Requirements:

  • The individual’s experience must be related to information security or cyber risk. We are not considering individuals with experience mostly or wholly in physical security.

Required Skills:

  • 6 Years of Required Proven track record of leading advanced risk management initiatives by designing and deploying integrated security platforms and analytics solutions
  • 6 Years of Required Demonstrated ability to orchestrate cross-functional program reviews and interagency collaboration across diverse operational environments
  • 6 Years of Required Demonstrated ability to translate complex risk management concepts, strategies, and methods into understandable formats for diverse audiences including executive leadership
  • 6 Years of Required Experience in developing and refining information security risk management programs in a federated governance environment
  • 6 Years of Required Expertise in translating complex state specific information security frameworks and regulatory mandates (e.g. TCF, TAC 202, TEXRAMP) into actionable prioritized risk assessment methodologies
  • 8 Years of Preferred Exceptional writing and communication skills producing through clear risk management documentation that supports strategic decision making
  • 8 Years of Preferred Hands on experience in configuring and operationalizing risk management tools and platforms. Ensuring seamless integration with legacy platforms and processes