Senior Cyber Risk Analyst - Remote US

Amentum; Trenton (NJ); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) with match

Paid time off and holidays

Educational reimbursement

Parental leave

Employee stock purchase plan

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst to join its US remote team within the Cybersecurity Governance, Risk, and Compliance (GR&C) group. This role owns enterprise cyber risk assessment work and translates risk into business terms for leadership, spanning networking, cloud, identity, and endpoints.

The position emphasizes risk framing beyond compliance, enhances risk methodologies, and collaborates with Compliance to ensure cohesive risk treatment across frameworks.

Qualifications

• Hands-on cybersecurity experience with enterprise focus.
• Experience evaluating risk beyond policy or audit.
• Current Security+ or equivalent certification.
• U.S. Citizenship required; remote work within the U.S.

Responsibilities

• Conduct cyber risk assessments across the enterprise, identifying risk to confidentiality, integrity, and availability.
• Articulate cyber risk to leadership in clear, decision-ready terms aligned to risk appetite.
• Lead cyber risk reviews (third-party risk, temporary risk acceptance, software risk) and track AI development risks.
• Coordinate with Compliance to ensure coherent risk treatment across frameworks.
• Maintain knowledge of cyber risk, threat landscape, technology, and regulatory requirements.
• Travel up to 25 percent.

Skills

Cyber risk assessment

NIST knowledge

Communication

Travel readiness

Education

Bachelor’s degree in Computer Science/Information Systems or related field

Master’s degree (preferred)

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst to join its US remote team within the Cybersecurity Governance, Risk, and Compliance (GR&C) group. This role owns enterprise cyber risk assessment work and translates risk into business terms for leadership, spanning networking, cloud, identity, and endpoints.

The position emphasizes risk framing beyond compliance, enhances risk methodologies, and collaborates with Compliance to ensure cohesive risk treatment across frameworks.