Remote Senior Cyber Risk Analyst

Amentum; Oregon; Hybrid; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Educational reimbursement

Paid time off

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst to join the Cybersecurity Governance, Risk, and Compliance team. This role leads enterprise cyber risk assessments, translating technical risk into business terms for leadership to act on within the risk appetite.

The position is US remote with occasional travel up to 25%. You will collaborate with Compliance and IT across networks, cloud, endpoint, and identity to strengthen the security program and drive risk-informed decision making.

Qualifications

• Eight years of hands-on cybersecurity experience with real tech environments.
• Experience in enterprise risk management and in third-party cyber risk assessment.
• Current Security+ or an equivalent certification; hands-on capability valued over credentials.

Responsibilities

• Lead cyber risk assessments across the enterprise, identifying risk to confidentiality, integrity, and availability.
• Articulate cyber risk to business and technical leadership in decision-ready terms aligned to the risk appetite.
• Take the lead on cyber risk reviews including third-party risk and software risk, tracking AI risk related to enterprise.
• Work with Compliance to ensure risk interpretations are coherent across frameworks.
• Evaluate cyber risk implications of networking, cloud, endpoint, and identity decisions.
• Articulate residual risk when it exceeds appetite and specify required mitigations.
• Contribute a risk-posture perspective to scoping and architecture decisions.

Skills

Cyber risk assessment

NIST framework knowledge

Security+

Communication

Risk articulation

Cloud & network risk

Autonomous work

Education

Bachelor's degree

Master's degree preferred

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst to join the Cybersecurity Governance, Risk, and Compliance team. This role leads enterprise cyber risk assessments, translating technical risk into business terms for leadership to act on within the risk appetite.

The position is US remote with occasional travel up to 25%. You will collaborate with Compliance and IT across networks, cloud, endpoint, and identity to strengthen the security program and drive risk-informed decision making.