Senior Cyber Risk Analyst — Remote US

Amentum; Pierre (SD); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Amentum seeks a Senior Cybersecurity Risk Analyst for a US remote role within the Cybersecurity Governance, Risk, and Compliance team. This senior IC will own enterprise cyber risk assessments and frame risk for business leadership to decide on accept, mitigate, or remediate actions.

The role requires substantial hands-on cyber risk experience, knowledge of NIST, and ability to influence engineering and IT decisions while traveling up to 25% and maintaining US citizenship.

Qualifications

• Demonstrated ability to recognize cyber risk in networking, cloud, endpoint, and identity management.
• Experience with enterprise risk management and third-party cyber risk assessments.
• Proven ability to communicate risk in decision-ready terms to leadership.

Responsibilities

• Conduct cyber risk assessments across the enterprise, focusing on confidentiality, integrity, and availability.
• Articulate cyber risk to business and technical leadership within risk appetite.
• Lead cyber risk reviews including third-party risk and software risk reviews.
• Collaborate with Compliance to align risk treatment across frameworks.
• Evaluate technology decisions for cyber risk implications in various architectures.
• Recommend residual risk reductions and contribute to risk posture discussions.
• Improve GR&C processes: methodology, intake, evidence handling, and consistency.
• Maintain currency on cyber risk, threats, and regulatory landscape.
• Travel up to 25 percent.

Skills

Cyber risk assessment

Articulate risk to leadership

NIST framework knowledge

Strong communication

Autonomous worker

Travel up to 25%

Education

Bachelor’s degree in Computer Science/Information Systems or related field

Tools

Security+ certification

Job description

Amentum seeks a Senior Cybersecurity Risk Analyst for a US remote role within the Cybersecurity Governance, Risk, and Compliance team. This senior IC will own enterprise cyber risk assessments and frame risk for business leadership to decide on accept, mitigate, or remediate actions.

The role requires substantial hands-on cyber risk experience, knowledge of NIST, and ability to influence engineering and IT decisions while traveling up to 25% and maintaining US citizenship.