ZipRecruiter

Log In

1

Senior Information Security Risk Analyst Jobs in Utah

NICE

Senior Information Security Analyst, CX

Sandy, UT · On-site

Senior Information Security Analyst So, what's the role all about? The Information Security Analyst ... Conduct internal audits to evaluate and enhance IT controls, compliance with standards, and risk ...

NICE

Senior Information Security Analyst, CX

Sandy, UT · On-site

Senior Information Security Analyst So, what's the role all about? The Information Security Analyst ... Conduct internal audits to evaluate and enhance IT controls, compliance with standards, and risk ...

swirecc

Sr. IT Security Engineer

Draper, UT · On-site

$107K - $146K/yr

A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and ... Analyze security findings and recommend appropriate compensating controls or risk reduction ...

swirecc

Sr. IT Security Engineer

Draper, UT

$107K - $146K/yr

A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and ... Analyze security findings and recommend appropriate compensating controls or risk reduction ...

swirecc

Sr. IT Security Engineer

Draper, UT · On-site

$107K - $146K/yr

A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and ... Analyze security findings and recommend appropriate compensating controls or risk reduction ...

KēSTA I.T.

Sr. IT Security Engineer

Draper, UT · Hybrid

$107K - $146K/yr

T. is actively seeking a Sr. IT Security Engineer for an immediate full-time opportunity with our ... Analyze security findings and recommend appropriate compensating controls or risk-reduction ...

Swire Coca-Cola, USA

Sr. IT Security Engineer

Draper, UT · On-site

$107K - $146K/yr

A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and ... Analyze security findings and recommend appropriate compensating controls or risk reduction ...

Jobtailor

Senior Information Security Engineer

Sandy, UT · On-site

$110 - $170/hr

Conduct security assessments, threat modelling, and risk analysis for products, infrastructure, and ... Information Security, Application Security, Security Engineering, or a related field * Strong ...

Orion

Senior Privacy & AI Risk Analyst

Lehi, UT · Hybrid

As a Senior Privacy & AI Risk Analyst, you will be expected to spearhead privacy initiatives and ... In coordination with Information Security Team, assist in Vendor Risk Assessments relating to ...

next page

Showing results 1-20

All JobsInformation Security Risk Analyst JobsSenior Information Security Risk Analyst JobsSenior Information Security Risk Analyst Jobs in Utah

Senior Information Security Risk Analyst information

See Utah salary details

$29

$53

$68

How much do senior information security risk analyst jobs pay per hour?

As of Aug 28, 2026, the average hourly pay for senior information security risk analyst in Utah is $53.21, according to ZipRecruiter salary data. Most workers in this role earn between $41.35 and $59.76 per hour, depending on experience, location, and employer.

What does a senior information security risk analyst do?

A Senior Information Security Risk Analyst is responsible for identifying, evaluating, and mitigating risks to an organization's information systems and data. They conduct risk assessments, develop security policies, and recommend measures to protect against cyber threats and vulnerabilities. Additionally, they work closely with IT and business teams to ensure compliance with regulations and industry standards, and they often play a key role in incident response and security awareness training.

What are the key skills and qualifications needed to thrive as a senior information security risk analyst?

A Senior Information Security Risk Analyst requires a deep understanding of cybersecurity frameworks, risk assessment methodologies, and regulatory compliance, usually backed by a degree in information security or a related field. Familiarity with tools like risk management software (e.g., Archer, RSA), SIEM systems, and certifications such as CISSP, CISM, or CRISC are typically expected. Exceptional analytical thinking, attention to detail, and strong communication skills set top performers apart in this role. These competencies are crucial to effectively identify, evaluate, and mitigate security risks, ensuring the organization's information assets remain protected against evolving threats.

How does a senior information security risk analyst typically collaborate with other departments to manage organizational risk?

A Senior Information Security Risk Analyst regularly works with various departments such as IT, legal, compliance, and business units to identify and address security risks. This collaboration often includes conducting risk assessments, reviewing new projects for potential vulnerabilities, and providing guidance on security best practices. Effective communication skills are essential, as the analyst must translate technical risks into business impacts and help teams implement appropriate controls. Close teamwork ensures that security is integrated into all business processes and that the organization remains compliant with relevant regulations.

What is the difference between Senior Information Security Risk Analyst vs Information Security Analyst?

AspectSenior Information Security Risk AnalystInformation Security Analyst
CertificationsCISSP, CISA, CRISCCISSP, Security+, CEH
Work EnvironmentFocus on risk assessment, policy development, and strategic planningImplementing security measures, monitoring, and incident response
Employer & Industry UsageFinancial, healthcare, and large enterprises with complex security needsVariety of industries, including tech, retail, and government

Senior Information Security Risk Analysts typically handle advanced risk assessments and strategic security planning, often requiring certifications like CISSP or CISA. Information Security Analysts focus on implementing security controls and monitoring systems. Both roles are vital in maintaining organizational security but differ in scope and seniority.

What are popular job titles related to Senior Information Security Risk Analyst jobs in Utah?

For Senior Information Security Risk Analyst jobs in Utah, the most frequently searched job titles are:

What job categories do people searching Senior Information Security Risk Analyst jobs in Utah look for?

The top searched job categories for Senior Information Security Risk Analyst jobs in Utah are:

What cities in Utah are hiring for Senior Information Security Risk Analyst jobs?

Cities in Utah with the most Senior Information Security Risk Analyst job openings:

Senior Information Security Risk Analyst jobs near you

IT Risk Analyst II

Salt Lake City, UT

Western Governors University
Colleges, Universities, and Professional Schools • 5 - 10K employees

8.5

Company rating: 8.5 out of 10

Based on 44 frontline employees who took The Breakroom Quiz

82nd of 623 rated colleges and universities

Great coworkers

People enjoy working here

Good employer

Learn more about Western Governors Universityexternal

$108K - $162K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 3 hours ago

Job description

If you're passionate about building a better future for individuals, communities, and our country-and you're committed to working hard to play your part in building that future-consider WGU as the next step in your career.

Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families.

The salary range for this position takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.

At WGU, it is not typical for an individual to be hired at or near the top of the range for their position, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is:

Grade: Technical 407Pay Range: $108,200.00 - $162,400.00

Job Description

The IT Risk Analyst II is a member of WGU's IT Security Risk team. Core responsibilities include third-party risk management (TPRM) and security risk assessments of vendors, suppliers, internal systems, and projects. The analyst recommends controls to reduce risk to the university, and those recommendations have to rest on real understanding: how the system works, what the vendor actually does for WGU, and what the business is trying to accomplish. This is a seasoned analyst role. You will work independently on problems of diverse scope, exercise good judgment in selecting assessment methods, and advise stakeholders inside and outside the security function.

  • Essential Functions and Responsibilities

    • Conduct third-party and supplier risk assessments end to end: scoping, evidence review (SOC 2 reports, questionnaires, contracts), risk analysis, and a clear residual risk conclusion.

    • Conduct security risk assessments of internal systems, projects, and applications using industry-accepted frameworks, including NIST and similar standards.

    • Perform Open-Source Intelligence (OSINT) research on third parties, suppliers, and applications to establish the security profile of the target of evaluation.

    • Work with engineers, architects, and business units to understand how a system, vendor, or project actually works before recommending controls.

    • Recommendations are grounded in that understanding, not in a checklist.

    • Recommend security controls that fit the risk and the business context, and support the teams responsible for implementing them.

    • Provide guidance to operational teams and third parties on remediating deficiencies identified in assessments.

    • Remediation is owned by the responsible team; the analyst advises.

    • Work with IT and business unit management to keep third parties, applications, and suppliers aligned with the university's security requirements.

    • Serve as lead analyst on risk analysis, third-party risk, and exception-to-policy efforts as assigned.

    • Articulate risk to management in plain language: what the risk is, who it affects, and what it costs to accept or fix.

    • Measure, collect, and report on key risk indicators and information security services.

    • Identify and build AI efficiencies in risk and assessment workflows, including AI-assisted analysis and agent-based tooling.

    • Contribute to security policies, standards, procedures, and assessment methodologies; identify process gaps and drive improvement.

    • Act as an advocate for information security, helping the business understand risk, standards, and best practices for third parties and products.

    Minimum Qualifications

    • Bachelor's degree in a related field and 3 years of relevant work experience,

    • 7+ years of information security, or 6+ years of experience with a relevant certification.

    • Working knowledge of risk management frameworks and practices, including NIST.

    • Working knowledge of regulations relevant to higher education and data protection, such as FERPA, GLBA, GDPR, and HIPAA.

    • Experience assessing security controls and recommending safeguards in a corporate environment.

    • Experience with cybersecurity and privacy principles used to manage risk to the use, processing, storage, and transmission of data. Experience with AI tools, including building or using AI agents in day-to-day work.

    • Strong analytical and problem-solving skills; detail-oriented and results-driven.

    • Strong written and oral communication skills, including the ability to explain technical risk to non-technical audiences.

    Nice to Have

    • Industry certification, such as CISSP, CISM, CRISC, or CISA.

    • Experience with TPRM platforms or GRC tooling.

    • Higher education experience.

    Location

    5 days onsite in Salt Lake City, Utah.

    Job Description Disclaimer: This position description provides the major duties, responsibilities, requirements, and working conditions for the position. It is intended to be an accurate reflection of the current position; however, management reserves the right to revise or change as necessary to meet organizational needs. Other responsibilities may be assigned when circumstances require.

    #LI-AW2

Position & Application Details

Full-Time Regular Positions (classified as regular and working 40 standard weekly hours): This is a full-time, regular position (classified for 40 standard weekly hours) that is eligible for bonuses; medical, dental, vision, telehealth and mental healthcare; health savings account and flexible spending account; basic and voluntary life insurance; disability coverage; accident, critical illness and hospital indemnity supplemental coverages; legal and identity theft coverage; retirement savings plan; wellbeing program; discounted WGU tuition; and flexible paid time off for rest and relaxation with no need for accrual, flexible paid sick time with no need for accrual, 11 paid holidays, and other paid leaves, including up to 12 weeks of parental leave.

How to Apply: If interested, an application will need to be submitted online. Internal WGU employees will need to apply through the internal job board in Workday.

Additional Information

Disclaimer: The job posting highlights the most critical responsibilities and requirements of the job. It's not all-inclusive.

Accommodations: Applicants with disabilities who require assistance or accommodation during the application or interview process should contact our Talent Acquisition team at recruiting@wgu.edu.

Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to any protected characteristic as required by law.

What Western Governors University employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply