ZipRecruiter

Log In

1

Senior Cyber Security Risk Analyst Jobs (NOW HIRING)

LinTech Global

Senior Cybersecurity Engineer

Washington, DC · On-site

$129K - $177K/yr

Technical risk analysis * Cybersecurity tool integration * Security architecture governance * The ... The Senior Cybersecurity Engineer must have at least 10 years of demonstrated experience in ...

System One

Cybersecurity GRC Analyst

Owings Mills, MD · Remote

$51/hr

This role is responsible for conducting risk assessments, enhancing security practices, evaluating ... Cybersecurity GRC Analyst * Information Security Analyst (Governance/Risk) * IT Risk Analyst

City of New York

Cyber Risk Analyst

Brooklyn, NY · On-site

... cybersecurity risks across NYC agencies. Responsibilities : • Build new risk processes and ... senior leadership; • Engage in communications with NYC agencies to assist them in successfully ...

previous page

Showing results 41-60

All JobsTechnology JobsNetworking JobsCyber Security Engineer JobsSenior Cyber Security Risk Analyst Jobs

Senior Cyber Security Risk Analyst information

See salary details

$23K

$113.7K

$150.5K

How much do senior cyber security risk analyst jobs pay per year?

As of Aug 20, 2026, the average yearly pay for senior cyber security risk analyst in the United States is $113,704.00, according to ZipRecruiter salary data. Most workers in this role earn between $100,000.00 and $129,000.00 per year, depending on experience, location, and employer.

What does a senior cyber security risk analyst do?

A Senior Cyber Security Risk Analyst is responsible for identifying, assessing, and mitigating potential cybersecurity threats to an organization. They analyze security risks, develop strategies to protect sensitive data, and ensure compliance with industry regulations and best practices. Their role often involves conducting risk assessments, recommending security improvements, and collaborating with IT and business teams to strengthen the organization's overall cybersecurity posture.

What are the key skills and qualifications needed to thrive as a senior cyber security risk analyst?

To thrive as a Senior Cyber Security Risk Analyst, you need in-depth knowledge of risk assessment methodologies, cyber security frameworks (such as NIST or ISO 27001), and a strong background in IT or computer science, often supported by a bachelor's degree and relevant certifications. Familiarity with risk management tools, vulnerability scanning platforms, and security information and event management (SIEM) systems is typically required. Strong analytical thinking, communication skills, and the ability to influence stakeholders are critical soft skills for excelling in this role. These competencies help ensure organizations can proactively identify, assess, and mitigate security risks, thereby protecting sensitive assets and maintaining compliance.

How does a senior cyber security risk analyst typically collaborate with other departments to manage organizational risks?

A Senior Cyber Security Risk Analyst often works closely with IT, compliance, legal, and business units to assess and mitigate cybersecurity risks across the organization. This collaboration involves conducting risk assessments, sharing findings with relevant stakeholders, and developing strategies to address vulnerabilities. Effective communication and teamwork are essential, as the analyst must translate technical risks into business impacts and ensure all departments understand their roles in risk management. Regular meetings and cross-functional projects are common, fostering a proactive security culture throughout the organization.

What is the difference between Senior Cyber Security Risk Analyst vs Cyber Security Risk Analyst?

AspectSenior Cyber Security Risk AnalystCyber Security Risk Analyst
CertificationsCCSP, CISSP, CISACCSP, CISSP, CISA
Work EnvironmentMore strategic, leadership roles, mentoringOperational, technical risk assessments
ResponsibilitiesOversees risk management programs, policy developmentPerforms risk assessments, vulnerability analysis

The main difference lies in experience and scope. Senior Cyber Security Risk Analysts typically handle strategic planning and leadership, while Cyber Security Risk Analysts focus on technical risk assessments. Both roles require similar certifications and work within the same industry environment, but the senior position involves more oversight and decision-making responsibilities.

More about Senior Cyber Security Risk Analyst jobs

What cities are hiring for Senior Cyber Security Risk Analyst jobs?

Cities with the most Senior Cyber Security Risk Analyst job openings:

What are the most commonly searched types of Cyber Security Risk Analyst jobs?

The most popular types of Cyber Security Risk Analyst jobs are:

What states have the most Senior Cyber Security Risk Analyst jobs?

States with the most job openings for Senior Cyber Security Risk Analyst jobs include:

What job categories do people searching Senior Cyber Security Risk Analyst jobs look for?

The top searched job categories for Senior Cyber Security Risk Analyst jobs are:

Senior Cyber Security Risk Analyst jobs near you
Infographic showing various Senior Cyber Security Risk Analyst job openings in the United States as of August 2026, with employment types broken down into 87% Full Time, 11% Part Time, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $113,704 per year, or $54.7 per hour.

USAF - Sr. Cybersecurity Analyst

cFocus Software Incorporated

Ellsworth, ME • On-site

$99K - $128K/yr

Full-time

Posted 17 days ago

Job description

cFocus Software seeks a Sr. Cybersecurity Analyst to join our program supporting the United States Air Force. This position is onsite with the onsite location being in Ellsworth, South Dakota. This position requires a TS/SCI SSBI clearance.
Qualifications:
  • Active TS/SCI SSBI clearance
  • B.S. Computer Science, Information Technology, or a related field
  • 10+ years of RMF/Cybersecurity experience
  • Advanced experience leading RMF, Assessment and Authorization, and continuous-monitoring activities for multiple federal or DoD information systems.
  • Expert knowledge of federal, DoD, and Air Force cybersecurity policy and the ability to convert policy into practical, system-level implementation guidance.
  • Demonstrated experience developing and evaluating SSPs, RARs, POA&Ms, security-control evidence, authorization decision packages, and mission-impact analyses.
  • Hands-on proficiency with eMASS and ITIPS or equivalent federal authorization and portfolio-governance systems.
  • Advanced vulnerability assessment, risk analysis, mitigation planning, remediation coordination, and trend-reporting experience.
  • Ability to assess security controls, determine control effectiveness, document weaknesses and residual risk, and recommend risk-informed courses of action.
  • Experience briefing senior leaders and supporting Authorizing Officials, AODRs, system owners, program offices, governance forums, and technical teams.
  • Strong technical writing, analytical, quality-control, stakeholder-management, and version-control skills.
  • Ability to manage simultaneous authorization actions and recurring deliverables while meeting PWS deadlines and maintaining artifact currency.
  • Ability to work primarily at Ellsworth AFB during the PWS duty-hour window and support rare work at Wright-Patterson AFB or a contractor facility when required.
  • Active DoD 8140 certification

Duties:
  • Lead comprehensive Risk Management Framework lifecycle support across the DAF FM portfolio, including security control selection, implementation, validation, authorization, and continuous monitoring.
  • Provide expert advisory support to the FM Authorizing Official, AODR, and program offices on the compliant application of federal, DoD, and Air Force cybersecurity policy.
  • Analyze cybersecurity statutes, regulations, directives, standards, policies, and guidance and translate them into actionable implementation requirements for FM systems.
  • Develop, manage, review, and sustain authorization artifacts for multiple systems, including System Security Plans, Risk Assessment Reports, Plans of Action and Milestones, control evidence, and related records in eMASS and ITIPS.
  • Assess security controls; document gaps, weaknesses, associated risk levels, and recommended remediation strategies.
  • Conduct vulnerability assessments, perform technical and mission risk analysis, identify systemic issues, and design defensible mitigation strategies across the FM portfolio.
  • Coordinate vulnerability and POA&M remediation with system owners, cybersecurity personnel, engineers, and program management offices; validate closure evidence and residual risk.
  • Track and report enterprise-wide vulnerability trends, authorization status, ATO expiration dates, remediation progress, POA&M closure rates, overdue items, and escalation conditions.
  • Prepare complete, high-quality staffing packages for authorization decisions, including risk analysis, control summaries, mission impact, and recommendations for ATO, ATO with Conditions, or Denial.
  • Develop Mission Impact Assessments and presentation materials for AO decision meetings.
  • Facilitate communication among system owners, security personnel, program offices, and the FM AO to resolve information-assurance and authorization issues.
  • Prepare and deliver cybersecurity status updates, leadership briefings, annual program reviews, policy/guidance updates, and materials for governance forums and working groups.
  • Maintain the FM systems inventory and boundary documentation, including points of contact, authorization status, and ATO expiration information.
  • Support configuration, readiness, and technical reviews by evaluating cybersecurity risk, control implementation, change impacts, and production-readiness evidence.
  • Maintain accurate, current, version-controlled cybersecurity documentation and provide auditable evidence supporting QASP performance objectives.
  • Support COOP, contingency, incident, and other mission-continuity activities when requested by the PMO.

Apply