Senior Cyber Risk Analyst — Remote (US)

Amentum; Nashville (TN); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health Insurance

401(k) Matching

Educational reimbursement

Paid Time Off

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst to join the US remote GR&C team. You will own enterprise cyber risk assessments, translate technical risk into business terms, and drive risk decisions with leadership. The role requires deep hands-on cybersecurity experience, strong regulatory knowledge, and the ability to work autonomously while traveling up to 25%.

Ideal candidates have experience with NIST frameworks, cloud and identity architectures, and third-party risk reviews. U.S.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with a degree, or 4 years with a Master's.

Responsibilities

• Conduct cyber risk assessments across the enterprise, identifying risk to confidentiality, integrity, and availability.
• Articulate cyber risk to business and technical leadership in clear, decision-ready terms.
• Lead on cyber risk reviews including third-party and software risk assessments.
• Ensure risk treatment aligns across frameworks and compliance activities.
• Evaluate risk implications of technology decisions in networking, cloud, endpoints, and identity architectures.
• Propose residual risk levels and required mitigations.
• Improve GR&C processes including methodology and evidence handling.
• Maintain current knowledge of cyber risk, threats, and regulatory landscape.
• Travel up to 25%.

Skills

Cyber risk assessment

Articulate risk to leadership

NIST knowledge

Written and verbal communication

Autonomous worker

Travel willingness

Education

Bachelor's degree in CS/IS or related

Master's degree

Tools

Microsoft Azure

Microsoft 365

Entra ID

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst to join the US remote GR&C team. You will own enterprise cyber risk assessments, translate technical risk into business terms, and drive risk decisions with leadership. The role requires deep hands-on cybersecurity experience, strong regulatory knowledge, and the ability to work autonomously while traveling up to 25%.

Ideal candidates have experience with NIST frameworks, cloud and identity architectures, and third-party risk reviews. U.S.