Senior Cyber Risk Analyst - Remote, Enterprise Focus

Amentum; Lincoln (NE); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Educational reimbursement

Parental leave

PTO and holidays

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote, senior individual contributor role within the Cybersecurity Governance, Risk, and Compliance (GR&C) team. The role owns enterprise cyber risk assessment work and communicates risk to business leadership to inform decisions.

The position is risk-focused, working with engineering and IT to recognize risk in networking, cloud, endpoint, and identity decisions, and to ensure risk treatment aligns with enterprise appetite.

Qualifications

• Typically 8 years of hands-on cybersecurity experience, with demonstrated depth in evaluating real technology environments.
• Demonstrated experience in enterprise risk management and in third-party or vendor cyber risk assessment.
• Current Security+ or an equivalent industry certification.
• Must be a U.S. Citizen.
• U.S. Remote-Telework role; must reside within the United States to work remotely.

Responsibilities

• Conduct cyber risk assessments across the enterprise and identify risk to systems and data.
• Articulate cyber risk to leadership in clear, decision-ready terms against risk appetite.
• Lead on cyber risk reviews including third-party risk and software risk, tracking AI development related to risk.
• Coordinate with Compliance to ensure coherent risk treatment across frameworks.
• Evaluate risk implications of networking, cloud, endpoint, and identity decisions.

Skills

Cyber risk assessment

Articulate risk to leadership

NIST publications knowledge

Written and verbal communication

Travel up to 25%

Autonomous / self-starter

Education

Bachelor's degree in CS/IS or related field

Master's degree in related field

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote, senior individual contributor role within the Cybersecurity Governance, Risk, and Compliance (GR&C) team. The role owns enterprise cyber risk assessment work and communicates risk to business leadership to inform decisions.

The position is risk-focused, working with engineering and IT to recognize risk in networking, cloud, endpoint, and identity decisions, and to ensure risk treatment aligns with enterprise appetite.