Remote Senior Cyber Risk Analyst – GRC Leader

Amentum; Denver (CO); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) matching

Paid time off

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote role within the Cybersecurity Governance, Risk, and Compliance team. You will own enterprise cyber risk assessment work, framing risk for leadership to decide on acceptance, mitigation, or remediation.

The role requires technical recognition of risk in networking, cloud, endpoint, and identity decisions, with the credibility to influence engineering and IT teams, and leadership. US Citizenship is required.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with a Bachelor’s degree in Computer Science, Information Systems or related field plus; or 4 years with Master’s
• Demonstrated experience in enterprise risk management and in third-party or vendor cyber risk assessment
• Current Security+ or an equivalent industry certification
• Must be a U.S. Citizen and reside in the United States (remote work)

Responsibilities

• Conduct cyber risk assessments across the enterprise, identifying risk to confidentiality, integrity, and availability of systems and data.
• Articulate cyber risk to business and technical leadership in clear, decision-ready terms against risk appetite.
• Take lead on cyber risk reviews across multiple assessment types and track AI development related risk.
• Coordinate with Compliance to ensure coherent risk treatment across frameworks.
• Evaluate cyber risk implications of technology decisions in networking, cloud, endpoint, and identity.
• State when residual risk exceeds appetite and specify reduction required.
• Contribute risk posture perspective to scoping and architecture decisions.
• Improve operational aspects of Cyber GR&C: methodology, intake, evidence handling, consistency of risk judgments.
• Maintain current knowledge of cyber risk landscape and regulatory changes, updating assessments accordingly.
• Travel up to 25 percent and perform other duties as assigned.

Skills

Cyber risk assessment

Communicate risk to leadership

NIST risk & compliance

Written & verbal communication

Autonomous problem solving

Travel up to 25%

Education

Bachelor's in Computer Science / Information Systems

Master's degree

Tools

Azure

Entra ID

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote role within the Cybersecurity Governance, Risk, and Compliance team. You will own enterprise cyber risk assessment work, framing risk for leadership to decide on acceptance, mitigation, or remediation.

The role requires technical recognition of risk in networking, cloud, endpoint, and identity decisions, with the credibility to influence engineering and IT teams, and leadership. US Citizenship is required.