ZipRecruiter

Log In

1

Security Risk Jobs in Syracuse, NY (NOW HIRING)

Morgan Stanley

Risk Officer

Syracuse, NY

$120K - $160K/yr

Monitors and implements procedures to manage all facets of risk, including data security * Facilitates regular and consistent communication of Morgan Stanley Wealth Management policies and other ...

Morgan Stanley

Risk Officer

Syracuse, NY · On-site

$120K - $160K/yr

Monitors and implements procedures to manage all facets of risk, including data security * Facilitates regular and consistent communication of Morgan Stanley Wealth Management policies and other ...

Bechtel

Risk Administrator

Clay, NY · On-site

Nuclear, Security & Environmental; Energy; Mining & Metals, and the Manufacturing and Technology ... As a Project Risk Management professional at Bechtel, you will mitigate risks and maximize success.

National Grid

Principal Security Architect

Syracuse, NY · Hybrid

$184K - $216K/yr

Drive integration of modern and emerging technologies into secure enterprise solutions Risk Management & Governance * Identify, assess, and communicate security risks, ensuring alignment with ...

next page

Showing results 1-20

All JobsSecurity Risk JobsSecurity Risk Jobs in Syracuse, NY

Security Risk information

See Syracuse, NY salary details

$10

$49

$69

How much do security risk jobs pay per hour?

As of Aug 3, 2026, the average hourly pay for security risk in Syracuse, NY is $49.80, according to ZipRecruiter salary data. Most workers in this role earn between $40.38 and $59.38 per hour, depending on experience, location, and employer.

What is the difference between Security Risk vs Security Analyst?

AspectSecurity RiskSecurity Analyst
Required CredentialsKnowledge of security principles, risk assessment skillsCertifications like CompTIA Security+, CISSP, or CISA
Work EnvironmentIdentifying potential threats, assessing vulnerabilitiesMonitoring security systems, analyzing security data
Employer & Industry UsageUsed across industries to identify threatsCommonly employed in cybersecurity teams
Search & Comparison IntentUnderstanding risk factors and mitigationAnalyzing security incidents and improving defenses

Security Risk involves identifying and assessing potential threats to an organization, focusing on risk management strategies. Security Analysts, on the other hand, monitor and analyze security systems to detect and respond to threats. While both roles require security knowledge and certifications, Security Risk professionals focus on risk assessment, whereas Security Analysts are more involved in operational security monitoring.

What are security risk professionals?

Security risk professionals are experts who identify, assess, and mitigate potential threats to an organization's physical and digital assets. Their responsibilities include conducting risk assessments, developing security policies, and ensuring compliance with regulations. They work to minimize vulnerabilities that could lead to data breaches, theft, or other security incidents. These professionals may also train staff on security best practices and respond to security incidents as they arise.

Can you make $500,000 a year in cyber security?

Security risk professionals, such as senior cybersecurity analysts or managers, can potentially earn $500,000 annually with extensive experience, advanced certifications, and leadership roles in large organizations or consulting firms. High salaries are often associated with specialized skills, such as penetration testing or security architecture, and may require working in high-demand environments or taking on executive responsibilities.

Is 40 too old for cyber security?

Security risk professionals can enter the field at any age, as experience, problem-solving skills, and certifications like CISSP or CompTIA Security+ are often valued over age. Many individuals successfully transition into cybersecurity later in their careers, and continuous learning is essential regardless of age.

What is the highest paying security job?

The highest paying security jobs are often executive-level roles such as Chief Security Officer (CSO) or Security Director, with salaries exceeding $150,000 annually. These positions typically require extensive experience, leadership skills, and knowledge of risk management, cybersecurity, and compliance.

What are some common challenges faced by Security Risk professionals, and how can they overcome them?

Security Risk professionals often face challenges such as staying updated with rapidly evolving threats, balancing security needs with business objectives, and gaining buy-in from stakeholders for risk mitigation strategies. To overcome these, it’s essential to engage in continuous learning, build strong cross-functional relationships, and communicate the value of security initiatives in business terms. Developing robust reporting and assessment processes can also help identify risks early and ensure effective collaboration across departments.

What are the key skills and qualifications needed to thrive as a Security Risk Analyst, and why are they important?

To thrive as a Security Risk Analyst, you need a strong understanding of information security principles, risk assessment methodologies, and relevant regulations, typically supported by a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), vulnerability assessment tools, and certifications like CISSP or CISM are highly valued. Analytical thinking, attention to detail, and effective communication skills help convey risk findings and collaborate with diverse stakeholders. These competencies are crucial for identifying threats, minimizing vulnerabilities, and ensuring organizational resilience against security risks.

Is security risk management a good career?

Security risk management is a growing field that involves identifying, assessing, and mitigating security threats to organizations. It requires strong analytical skills, knowledge of security protocols, and often certifications like CISSP or CISM. The profession offers opportunities in various industries, with a focus on protecting assets and information, and typically involves a mix of office work and on-site assessments.
What are popular job titles related to Security Risk jobs in Syracuse, NY? For Security Risk jobs in Syracuse, NY, the most frequently searched job titles are:
What job categories do people searching Security Risk jobs in Syracuse, NY look for? The top searched job categories for Security Risk jobs in Syracuse, NY are:
Security Risk jobs near you
Infographic showing various Security Risk job openings in Syracuse, NY as of July 2026, with employment types broken down into 1% As Needed, 82% Full Time, 15% Part Time, and 2% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $103,592 per year, or $49.8 per hour.

GRC Vendor Risk Analyst

Community Financial System, Inc.

Syracuse, NY

Full-time

Posted 2 days ago

New

Job description

Overview

At Community Financial System, Inc. (CFSI), we are dedicated to providing our customers with friendly, personalized, high-quality financial services and products. Our retail division, Community Bank, N.A., operates more than 200 customer facilities across Upstate New York, Northeastern Pennsylvania, Vermont and Western Massachusetts. Beyond retail banking, we also offer commercial banking, wealth management, investment management, insurance and risk management, and benefit plan administration.

Just as our employees are committed to helping our customers manage their finances, we’re committed to our employees. After all, they make it happen for our customers every day.

To ensure our people can enjoy long and successful careers here at CFSI, we offer competitive compensation, great benefits, and professional development and advancement opportunities. As an equal-opportunity workplace and affirmative-action employer, we celebrate and support a diverse workplace for the benefit of all: our employees, customers and communities.


Responsibilities

Support CFSI’s third-party risk management program by administering the vendor due diligence portal, responding to inquiries and completing questionnaires provided by our customers and prospects regarding our information security controls, conducting information security due diligence assessments of new and existing vendors, and partnering with Enterprise Risk Management to strengthen the overall third-party risk framework. This role also supports AI Governance activities related to third-party AI solution evaluations, ongoing monitoring of approved relationships, and governance processes involving internally developed AI and agent solutions, in alignment with guidance established by the AI Governance Committee.

Essential Duties:

  • Administer and maintain the third-party due diligence portal, ensuring current content, standard responses, supporting documentation, and security artifacts remain aligned with internal policies and controls.
  • Coordinate, complete, and track information security questionnaires from customers, partners, auditors, and other authorized third parties.
  • Partner with stakeholders across various business lines to gather responses and supporting evidence.
  • Perform information security due diligence reviews of new and existing vendors through review of SOC reports, questionnaires, policies, penetration test summaries, business continuity materials, and other documentation to assess security posture, control environments, data protection practices, regulatory considerations, and overall risk.
  • Identify, document, and communicate information security risks, control gaps, due diligence findings, and remediation recommendations to support management and governance decision-making.
  • Support AI Governance activities related to third-party AI solution evaluations, ongoing monitoring of approved use cases, and governance processes involving internally developed AI and agent solutions, in alignment with guidance established by the AI Governance Committee.
  • Support enhancements to third-party risk processes, standards, reporting, workflows, templates, metrics, and ongoing monitoring activities.
  • Support identity and access management governance, review, and related coordination activities as assigned.
  • Track remediation items, follow-up actions, and review outcomes to support timely resolution.
  • Maintain organized assessment records, questionnaires, exceptions, and supporting documentation in accordance with policy and regulatory expectations.
  • Support audits, examinations, and internal reviews related to vendor management, information security due diligence, and AI Governance oversight.
  • Perform other Information Security, third-party risk, and related governance duties as assigned by management.

Ancillary Duties:

As an integral member of CFSI, this position is responsible to provide assistance wherever necessary to help the Branches and the Bank in achieving their annual goals. This may include traveling to other branches in the area to provide support as needed and to ensure proper staffing and service levels.


Qualifications

Education, Training & Requirements:

  • Bachelor’s Degree required in Information Security, Cybersecurity, Information Technology or equivalent experience considered

Skills:

  • Strong analytical and communication skills. Proficient in conducting third-party information security due diligence, including reviewing SOC reports, penetration tests, and security questionnaires. Familiarity with risk assessment frameworks (e.g., NIST, SIG, CIS) and emerging AI governance guidelines. Ability to work independently and collaboratively to identify, document, and communicate security risks.

Experience:

  • 4+ years of experience in Information Security; OR
  • 4+ years of experience in Risk Management or Third-Party Risk Management (TPRM) with a strong focus on Information Security and GRC; OR
  • 4+ years of experience in Information Technology with a dedicated focus on Security or GRC.
  • Experience or familiarity with emerging technology risk frameworks (such as AI Governance or the NIST AI Risk Management Framework) is highly desired.
  • Financial industry experience (e.g., familiarity with GLBA, FFIEC, or FDIC guidelines) is preferred but not required.
  • All applicants must be 18 years of age or older.