Remote Senior Cyber Risk Analyst

Amentum; Hartford (CT); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

401(k) matching

Job summary

Amentum is a global leader in advanced engineering and innovative technology solutions. The Senior Cybersecurity Risk Analyst is a US remote, senior individual contributor role within the Cybersecurity Governance, Risk, and Compliance (GR&C) team.

This role owns the enterprise’s cyber risk assessment work and frames risk in business terms for leadership. Responsibilities include assessing technology decisions, communicating risk, and guiding informed accept/mitigate/remediate decisions.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with depth in evaluating real technology environments.
• Experience in enterprise risk management and third-party cyber risk assessment.
• Current Security or equivalent industry certification.
• Must be a U.S. Citizen.
• U.S. Remote-Telework role; must reside within the United States.

Responsibilities

• Conduct cyber risk assessments across the enterprise, identifying risk to confidentiality, integrity, and availability.
• Articulate cyber risk to business and technical leadership in clear, decision-ready terms.
• Lead cyber risk reviews across third-party risk, risk acceptance, and software risk review; track AI development as it relates to cyber risk.
• Coordinate with Compliance to ensure coherent risk treatment across frameworks.
• Evaluate risk implications of technology decisions in networking, cloud, endpoint, and identity architectures.

Skills

Cyber risk assessment

Risk articulation

NIST knowledge

Communication skills

Travel up to 25%

Education

Bachelor's degree

Master's degree

Job description

Amentum is a global leader in advanced engineering and innovative technology solutions. The Senior Cybersecurity Risk Analyst is a US remote, senior individual contributor role within the Cybersecurity Governance, Risk, and Compliance (GR&C) team.

This role owns the enterprise’s cyber risk assessment work and frames risk in business terms for leadership. Responsibilities include assessing technology decisions, communicating risk, and guiding informed accept/mitigate/remediate decisions.