Senior Cyber Risk Analyst — Remote (US)

Amentum; Bismarck (ND); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Paid time off and holidays

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote role within the Cybersecurity Governance, Risk, and Compliance team. You will own enterprise cyber risk assessments and present findings to leadership, guiding decisions to accept, mitigate, or remediate risk across networking, cloud, and identity architectures.

Required are deep hands-on cybersecurity and enterprise risk experience, plus Security+ or equivalent.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems or related field; or 4 years with Master’s.
• Hands-on cybersecurity experience with enterprise risk management and third-party risk.
• Current Security+ or equivalent certification.

Responsibilities

• Conduct cyber risk assessments across the enterprise and identify risk to confidentiality, integrity, and availability.
• Articulate risk to business and technical leadership in decision-ready terms.
• Lead reviews for third-party cyber risk, temporary risk acceptance, and software risk.
• Coordinate with Compliance to ensure coherent risk treatment across frameworks.
• Stay current on cyber risk, threat, technology, and regulatory landscapes.

Skills

Cyber risk assessment

Articulate risk to leadership

NIST publications knowledge

Written and verbal communication

Autonomous problem solving

Ability to travel up to 25%

Education

Bachelor’s degree in Computer Science or related field

4 years with Master’s degree

Tools

Microsoft Azure

Entra ID

Microsoft 365

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote role within the Cybersecurity Governance, Risk, and Compliance team. You will own enterprise cyber risk assessments and present findings to leadership, guiding decisions to accept, mitigate, or remediate risk across networking, cloud, and identity architectures.

Required are deep hands-on cybersecurity and enterprise risk experience, plus Security+ or equivalent.