Remote Senior Cyber Risk Analyst

Amentum; Boise (ID); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote role within the Cybersecurity Governance, Risk, and Compliance (GR&C) team. You will lead cyber risk assessments, articulate risk to executives, and coordinate with Compliance to ensure cohesive risk treatment.

The position requires 8+ years of cybersecurity experience, Security+ or equivalent, US citizenship, and willingness to travel up to 25%.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with a degree in CS/IS or related field; or 4 years with Master's.
• Experience in enterprise risk management and third-party cyber risk assessment.
• Current Security+ or equivalent certification; hands-on capability weighted more than credentials.

Responsibilities

• Conduct cyber risk assessments across the enterprise and identify risk to confidentiality, integrity, and availability.
• Articulate cyber risk to business and technical leadership in decision-ready terms.
• Lead cyber risk reviews across various assessment types and track AI development as it relates to cyber risk.
• Ensure risk treatment is coherent across frameworks in collaboration with Compliance.
• Advise on risk implications of technology decisions in networking, cloud, endpoint, and identity architectures.
• Travel up to 25% and support enterprise risk posture improvements.

Skills

Cyber risk awareness

Risk communication

NIST knowledge

Communication skills

Travel readiness

Education

Bachelor's degree in CS/IS or related

Master's degree preferred

Tools

Security+

Azure/Azure Gov

Azure AD

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote role within the Cybersecurity Governance, Risk, and Compliance (GR&C) team. You will lead cyber risk assessments, articulate risk to executives, and coordinate with Compliance to ensure cohesive risk treatment.

The position requires 8+ years of cybersecurity experience, Security+ or equivalent, US citizenship, and willingness to travel up to 25%.