Remote Senior Cyber Risk Analyst - Enterprise GR&C

PAE Government Services Inc.; Richmond (VA); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental and vision insurance

Paid time off

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst to join the Cyber GR&C team in a US remote telework role. You will own enterprise cyber risk assessments, translate technical risk into business terms, and advise leadership on risk acceptance, mitigation, or remediation decisions.

Travel up to 25% is required. Ideal candidates have 8+ years in cybersecurity, strong knowledge of NIST guidance, and hands-on experience with networking, cloud, and identity/security architectures.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with a Bachelor's degree, or 4 years with a Master’s.
• Experience in enterprise risk management and third-party/vendor cyber risk assessment.
• Current Security+ or equivalent certification; hands-on capability weighted more than credentials.
• U.S. Citizenship required; U.S. remote-telework within the United States.

Responsibilities

• Conduct cyber risk assessments across the enterprise and articulate risk against the risk appetite.
• Translate risk into decision-ready terms for leadership to decide on acceptance, mitigation, or remediation.
• Lead cyber risk reviews including third-party and software risk assessments and track AI-related risks.
• Collaborate with Compliance to ensure coherent risk treatment across frameworks.
• Identify residual risk and specify required risk reductions; improve GR&C processes.

Skills

Cyber risk assessment

Communication

NIST frameworks

Cloud/Networking knowledge

Risk articulation to leadership

Education

Bachelor's degree in Computer Science/Information Systems or related field

Master's degree (preferred)

Tools

Microsoft Azure

Microsoft 365

Azure Government (GCC High)

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst to join the Cyber GR&C team in a US remote telework role. You will own enterprise cyber risk assessments, translate technical risk into business terms, and advise leadership on risk acceptance, mitigation, or remediation decisions.

Travel up to 25% is required. Ideal candidates have 8+ years in cybersecurity, strong knowledge of NIST guidance, and hands-on experience with networking, cloud, and identity/security architectures.