Remote Senior Cyber Risk Analyst

Amentum; Augusta (ME); Remote; USD 110,000 - 130,000; Full time

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote telework role within the Cybersecurity Governance, Risk, and Compliance team. You will own the enterprise's cyber risk assessment work, framing technical risk in business terms to inform accept, mitigate, or remediate decisions.

Responsibilities include leading risk reviews, coordinating with Compliance, evaluating risk in networking, cloud, endpoint and identity, and communicating risk to leadership.

Qualifications

• 8+ years of hands-on cybersecurity experience with real environments.
• Bachelor’s degree in Computer Science, Information Systems, or related field.
• Security+ or equivalent certification.
• U.S. Citizenship required.
• U.S. Remote-telework; must reside in the United States.

Responsibilities

• Perform cyber risk assessments across the enterprise.
• Articulate risk to business and technical leadership against risk appetite.
• Lead cyber risk reviews including third-party and software risks.
• Coordinate with Compliance to align controls across frameworks.
• Evaluate cyber risk implications of networking, cloud, endpoint, and identity.
• Indicate residual risk and required reductions.
• Contribute to scoping and architecture with risk posture input.
• Improve GR&C processes and maintain current threat knowledge.
• Travel up to 25%.

Skills

Cyber risk assessment

Articulate risk to leadership

NIST framework familiarity

Communication skills

Travel readiness

Education

Bachelor's degree in CS/IS or related field

Security+ certification

Tools

Microsoft Azure

Azure Government

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote telework role within the Cybersecurity Governance, Risk, and Compliance team. You will own the enterprise's cyber risk assessment work, framing technical risk in business terms to inform accept, mitigate, or remediate decisions.

Responsibilities include leading risk reviews, coordinating with Compliance, evaluating risk in networking, cloud, endpoint and identity, and communicating risk to leadership.