ZipRecruiter

Log In

1

Security Risk Jobs (NOW HIRING)

Ourhrconnect

IS Security Risk Analyst III

Columbia, SC · On-site

Independently monitor remediation of new and outstanding issues, including Information Security Risk Exception process, to ensure identification of areas of non-compliance. Utilize tools to track and ...

Mitchell Martin

Sr. Information Security Risk Analyst

$120K/yr

Title: Sr. Information Security Risk Analyst Location: Kansas City ,MO Position Type : Full Time Compensation Pay Range:$120,000 Per Year Description Join our team as a Senior Information Security ...

L.E.K. Consulting

Security Risk Architect

Chicago, IL · On-site

$130K - $150K/yr

Security Risk Architect Location Atlanta, Boston, Chicago, Houston, Los Angeles, New York, San Francisco About L.E.K. Consulting: L.E.K. Consulting is one of the premier strategy consulting firms ...

UMB

Sr. Information Security Risk Analyst

Kansas City, MO · On-site

$100K - $120K/yr

Sr. Information Security Risk Analyst As part of UMB's Corporate Information Security and Privacy (CISP) team, the mission is to identify threats, vulnerabilities, and risks and to help protect the ...

next page

Showing results 1-20

All JobsSecurity Risk Jobs

Security Risk information

See salary details

$10

$50

$69

How much do security risk jobs pay per hour?

As of Jun 29, 2026, the average hourly pay for security risk in the United States is $50.41, according to ZipRecruiter salary data. Most workers in this role earn between $40.87 and $60.10 per hour, depending on experience, location, and employer.

What is the difference between Security Risk vs Security Analyst?

AspectSecurity RiskSecurity Analyst
Required CredentialsKnowledge of security principles, risk assessment skillsCertifications like CompTIA Security+, CISSP, or CISA
Work EnvironmentIdentifying potential threats, assessing vulnerabilitiesMonitoring security systems, analyzing security data
Employer & Industry UsageUsed across industries to identify threatsCommonly employed in cybersecurity teams
Search & Comparison IntentUnderstanding risk factors and mitigationAnalyzing security incidents and improving defenses

Security Risk involves identifying and assessing potential threats to an organization, focusing on risk management strategies. Security Analysts, on the other hand, monitor and analyze security systems to detect and respond to threats. While both roles require security knowledge and certifications, Security Risk professionals focus on risk assessment, whereas Security Analysts are more involved in operational security monitoring.

What are security risk professionals?

Security risk professionals are experts who identify, assess, and mitigate potential threats to an organization's physical and digital assets. Their responsibilities include conducting risk assessments, developing security policies, and ensuring compliance with regulations. They work to minimize vulnerabilities that could lead to data breaches, theft, or other security incidents. These professionals may also train staff on security best practices and respond to security incidents as they arise.

Can you make $500,000 a year in cyber security?

Security risk professionals, such as senior cybersecurity managers or specialists with extensive experience and advanced certifications, can potentially earn $500,000 or more annually, especially in high-demand industries or senior leadership roles. Achieving this level typically requires a combination of specialized skills, leadership responsibilities, and often working in large organizations or consulting firms.

Is SOC 1 entry level?

SOC 1 (System and Organization Controls 1) reports are audit reports used by organizations to demonstrate controls over financial reporting. The term SOC 1 itself does not refer to a job role; however, professionals involved in SOC 1 audits, such as auditors or IT security specialists, typically require experience in internal controls and auditing standards, with entry-level roles often requiring relevant certifications like CPA or CISA. Entry-level positions in cybersecurity or audit firms may assist with SOC 1 assessments, but the certification and experience level vary by role.

What is the highest paying security job?

The highest paying security jobs are often executive-level roles such as Chief Security Officer (CSO) or Security Director, which can earn six-figure salaries. These positions typically require extensive experience, leadership skills, and knowledge of risk management, cybersecurity, and compliance.

What are some common challenges faced by Security Risk professionals, and how can they overcome them?

Security Risk professionals often face challenges such as staying updated with rapidly evolving threats, balancing security needs with business objectives, and gaining buy-in from stakeholders for risk mitigation strategies. To overcome these, it’s essential to engage in continuous learning, build strong cross-functional relationships, and communicate the value of security initiatives in business terms. Developing robust reporting and assessment processes can also help identify risks early and ensure effective collaboration across departments.

What are the key skills and qualifications needed to thrive as a Security Risk Analyst, and why are they important?

To thrive as a Security Risk Analyst, you need a strong understanding of information security principles, risk assessment methodologies, and relevant regulations, typically supported by a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), vulnerability assessment tools, and certifications like CISSP or CISM are highly valued. Analytical thinking, attention to detail, and effective communication skills help convey risk findings and collaborate with diverse stakeholders. These competencies are crucial for identifying threats, minimizing vulnerabilities, and ensuring organizational resilience against security risks.

Is security risk management a good career?

Security risk management is a growing field that involves identifying, assessing, and mitigating security threats to organizations. It requires strong analytical skills, knowledge of security protocols, and often certifications like CISSP or CISM. The profession offers opportunities in various industries, with increasing demand for professionals to protect digital and physical assets.
More about Security Risk jobs
What cities are hiring for Security Risk jobs? Cities with the most Security Risk job openings:
What states have the most Security Risk jobs? States with the most job openings for Security Risk jobs include:
What job categories do people searching Security Risk jobs look for? The top searched job categories for Security Risk jobs are:
Security Risk jobs near you
Infographic showing various Security Risk job openings in the United States as of June 2026, with employment types broken down into 73% Full Time, 25% Part Time, and 2% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $104,848 per year, or $50.4 per hour.

IS Security Risk Analyst III

Ourhrconnect

Columbia, SC • On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 10 days ago

Job description


Summary
 Why should you join the BlueCross BlueShield of South Carolina family of companies?
Other companies come and go, but for more than seven decades we've been part of the national landscape, with our roots firmly embedded in the South Carolina community. We are the largest insurance company in South Carolina ... and much more. We are one of the nation's leading administrators of government contracts. We operate one of the most sophisticated data processing centers in the Southeast. We also have a diverse family of subsidiary companies that allows us to build on a variety of business strengths. We deliver outstanding service to our customers. If you are dedicated to the same philosophy, consider joining our team!
Description
 

Position Purpose:

Plan and perform compliance and risk assessment activities for information systems and related processes. Communicate and escalate compliance and risk issues to the appropriate department and/or level of management. Act as a change agent to influence the I/S and corporate compliance culture.

This position requires a security clearance which requires U.S. Citizenship to obtain.

Sponsorship: This position is not eligible for sponsorship now or in the future.

What You Will Do:

  • Independently monitor remediation of new and outstanding issues, including Information Security Risk Exception process, to ensure identification of areas of non-compliance. Utilize tools to track and report on compliance posture.
  • Independently conduct formal risk analysis and self-assessments to determine effectiveness of controls and ensure creation of action plans to remediate identified risks.
  • Facilitate development, implementation and documentation of Information Security policies, procedures, processes and programs to guide organization toward continuous compliance. Independently analyze and interpret security regulations and controls to advise on security compliance at a broad perspective across multiple business areas. Consult on organizational impacts of compliance and risk management decisions.
  • Serve as an interface with external entities for governance and compliance reviews regarding information security risk across multiple business areas and controls.
  • Independently investigate, document and resolve Information Security Incidents. Advise senior management of critical issues that may affect organization.
  • Research emerging security topics, threats and capabilities to create/update policy and governance. Promote organizational security awareness by developing security training, Security Council bulletins, security policies, standards and best practices.


Required Education:

  • Bachelor's in a job related field
  • Or an additional 4 years job related work experience
  • Or Associate's plus an additional 2 years job related work experience


Required Work Experience:

  • 6 years of I/T experience including 4 years of IT security, risk assessment and/or compliance experience. Successful completion of BCBSSC I/S Entry Level Training Program (ELTP) may be substituted for 2 years of I/T experience.


Required Skills and Abilities:

  • Good understanding of Systems Development Life Cycle methodologies.
  • Subject Matter Expert in government or private risk frameworks and control implementations.
  • Good understanding of risk management, information system security and compliance standards.
  • Excellent analytical and decision-making skills.
  • Proven ability to interpret and apply knowledge of regulatory/accreditation requirements.
  • Ability to independently solve problems often spanning multiple environments and business areas.
  • Ability to effect change and bring security, risk and compliance knowledge to the organization through the use of positive influence.
  • Understanding of infrastructure and networking architecture WANs, LANs, Internet, intranets and communication protocols.
  • Strong communication skills in presenting results both verbally and in writing.
  • Possess excellent collaboration skills with a wide variety of internal matrix and management staff.


Required Software and Other Tools: Standard office equipment.

We Prefer That You Have:

  • Experience with NIST, FISMA, HIPAA, or other regulatory requirements.
  • Knowledge of technical security controls from NIST, DISA, USGCB, etc. compliance domains across multiple platforms.
  • Deep understanding of security risk exposures and how vulnerabilities can be translated into business risk that leadership understands.
  • Ability to analyze, trend and forecast from high volumes of compliance data.
  • Experience with compliance programs within a government agency (i.e. Medicare, Tricare) is preferred.
  • Direct experience with NIST 800-53 security frameworks.
  • Experience with DoD, DIARMF or FedRamp program is a plus.

Preferred Licenses and Certificates:

  • ISACA Certified Information Security Manager (CISM)
  • Comptia Security +
  • ISC2 SSCP (System Security Certified Practitioner)
  • CompTIA Cybersecurity Analyst+ (CySA+)


Work Environment: Fast paced, multi-platformed environment which may require action and response 24X7 to support the technical business needs of the customer.

What We Can Do for You:

We offer our employees great benefits and rewards. You will be eligible to participate in our benefits program the first of the month following 28 days of employment.

Our comprehensive benefits package includes:

  • Subsidized health plans, dental and vision coverage

  • 401K retirement savings plan with company match

  • Life Insurance

  • Paid Time Off (PTO)

  • Nine paid holidays

  • On-site cafeterias and fitness centers in major locations

  • Education Assistance

  • Service recognition

  • National discounts to movies, theaters, zoos, theme parks and more

Equal Employment Opportunity Statement

BlueCross BlueShield of South Carolina and our subsidiary companies maintain a continuing policy of nondiscrimination in employment to promote employment opportunities for persons regardless of age, race, color, national origin, sex, religion, veteran status, disability, weight, sexual orientation, gender identity, genetic information or any other legally protected status. Additionally, as a federal contractor, the company maintains affirmative action programs to promote employment opportunities for individuals with disabilitiesand protected veterans. It is our policy to provide equal opportunities in all phases of the employment process and to comply with applicable federal, state and local laws and regulations.

We are committed to working with and providing reasonable accommodations to individuals with disabilities, pregnant individuals, individuals with pregnancy-related conditions, and individuals needing accommodations for sincerely held religious beliefs, provided that those accommodations do not impose an undue hardship on the Company.

If you need special assistance or an accommodation while seeking employment, please email mycareer.help@bcbssc.comor call 800-288-2227, ext. 47480 with the nature of your request. We will make a determination regarding your request for reasonable accommodation on a case-by-case basis.

We participate in E-Verify and comply with the Pay Transparency Nondiscrimination Provision. We are an Equal Opportunity Employer. Here's moreinformation.

Some states have required notifications. Here's more information.

Apply