Remote Senior Cyber Risk Analyst – Enterprise GR&C

Amentum; Salt Lake City (UT); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst to join the global GR&C team in a US remote telework capacity. You will own enterprise cyber risk assessments and translate technical risk into business terms for leadership.

Candidates bring deep hands-on cybersecurity experience, familiarity with NIST, ISO, and risk frameworks, and the ability to influence architecture decisions while traveling up to 25%.

Qualifications

• 8+ years hands-on cybersecurity experience or 4+ years with Master's
• Experience in enterprise risk management and third-party cyber risk assessment
• Current Security+ or equivalent certification
• U.S. Citizenship required and able to work US remote

Responsibilities

• Conduct cyber risk assessments across the enterprise, identifying risk to confidentiality, integrity and availability of systems and data
• Articulate cyber risk to business and technical leadership in clear, decision-ready terms
• Lead cyber risk reviews for third-party risk, temporary risk acceptance, and software risk
• Collaborate with Compliance to ensure coherent risk treatment across frameworks
• Evaluate risk implications of technology decisions across networking, cloud, endpoint, and IAM architectures
• Define residual risk and required risk reduction for critical decisions
• Maintain currency with cyber risk landscape and regulatory developments
• Travel up to 25% and perform related duties as assigned

Skills

Cyber risk assessment

Communicate risk to leadership

NIST knowledge

Autonomous worker

Travel readiness

Education

Bachelor's degree in Computer Science, Information Systems or related field

Master's degree (preferred)

Tools

Microsoft Azure

Microsoft 365

Entra ID

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst to join the global GR&C team in a US remote telework capacity. You will own enterprise cyber risk assessments and translate technical risk into business terms for leadership.

Candidates bring deep hands-on cybersecurity experience, familiarity with NIST, ISO, and risk frameworks, and the ability to influence architecture decisions while traveling up to 25%.