Senior Cyber Risk Analyst - Remote US

Amentum; Salt Lake City (UT); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Holidays

Educational reimbursement

Parental leave

Employee stock purchase plan

Disability insurance

Pet insurance

Job summary

Amentum is a global leader in advanced engineering and innovative technology solutions. The Senior Cybersecurity Risk Analyst is a US remote, senior contributor role within the Cybersecurity Governance, Risk, and Compliance team, owning enterprise risk assessments and articulating results to leadership.

The role requires identifying risk across networking, cloud, endpoint, and IAM, aligning with risk appetite, and traveling up to 25 percent. US citizenship is required.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with a Bachelor's degree in Computer Science, Information Systems or related field; or 4 years with a Master's
• Demonstrated experience in enterprise risk management and in third-party or vendor cyber risk assessment
• Current Security+ or an equivalent industry certification
• Must be a U.S. Citizen
• U.S. Remote-Telework role; must reside within the United States to work remotely.

Responsibilities

• Conduct cyber risk assessments of activities and operational decisions across the enterprise, identifying risk to the confidentiality, integrity, and availability of enterprise systems and data.
• Articulate cyber risk to business and technical leadership in clear, decision-ready terms, framed against the enterprise's risk appetite.
• Take lead on cyber risk reviews across a range of assessment types, such as third-party cyber risk assessment, temporary risk acceptance review, and software risk review, and track enterprise artificial intelligence development as it relates to cyber risk.
• Work with the Compliance function to ensure that mandatory control interpretations do not leave other cyber risk unaddressed, and that risk treatment is coherent across frameworks.
• Evaluate the cyber risk implications of technology decisions, recognizing risk in networking, cloud, endpoint, and identity and access architectures that compliance-only review would not surface.
• Articulate when residual cyber risk exceeds the enterprise's appetite and specify the risk reduction required.
• Contribute a risk-posture perspective to enterprise scoping and architecture decisions, including the residual risk implications of carved-out certification environments and enclave boundaries.
• Improve the operational and procedural aspects of the Cyber GR&C function: assessment methodology, intake, risk articulation standards, evidence handling, and the consistency of risk judgments across the team.
• Maintain current knowledge of the cyber risk, threat, technology, and regulatory landscape, and bring that currency into assessments and into the team's collective capability.
• Travel up to 25 percent. Perform other position-related duties as assigned.

Skills

Cyber risk assessment

Articulate risk to leadership

NIST knowledge

Communication

Autonomous work

Travel up to 25%

Education

Bachelor's degree in Computer Science or Information Systems

Job description

Amentum is a global leader in advanced engineering and innovative technology solutions. The Senior Cybersecurity Risk Analyst is a US remote, senior contributor role within the Cybersecurity Governance, Risk, and Compliance team, owning enterprise risk assessments and articulating results to leadership.

The role requires identifying risk across networking, cloud, endpoint, and IAM, aligning with risk appetite, and traveling up to 25 percent. US citizenship is required.