Senior Cyber Risk Analyst - Remote (US Citizen)

Amentum; Madison (WI); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is hiring a Senior Cybersecurity Risk Analyst for a US remote role. You will own enterprise cyber risk assessment work, framing risk for leadership and guiding risk-based decisions across networking, cloud, and identity domains.

Join a team focused on improving risk posture, integrating risk into architecture choices, and aligning with industry standards. Requires strong technical risk judgment and US citizenship.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with a Bachelor’s degree in Computer Science, Information Systems or related field plus; or 4 years with Master’s
• Demonstrated experience in enterprise risk management and in third-party or vendor cyber risk assessment.
• Current Security+ or an equivalent industry certification.
• Must be a U.S. Citizen.
• U.S. Remote-Telework role; must reside within the United States to work remotely.

Responsibilities

• Conduct cyber risk assessments of activities and operational decisions across the enterprise, identifying risk to confidentiality, integrity, and availability of systems and data.
• Articulate cyber risk to business and technical leadership in clear, decision-ready terms, framed against the enterprise's risk appetite.
• Take lead on cyber risk reviews across a range of assessment types, such as third‑party cyber risk assessment, temporary risk acceptance review, and software risk review, and track enterprise AI development as it relates to cyber risk.
• Work with the Compliance function to ensure that mandatory control interpretations do not leave other cyber risk unaddressed, and that risk treatment is coherent across frameworks.
• Evaluate the cyber risk implications of technology decisions, recognizing risk in networking, cloud, endpoint, and identity architectures that compliance-only review would not surface.
• Articulate when residual cyber risk exceeds the enterprise's appetite and specify the risk reduction required.
• Contribute a risk-posture perspective to enterprise scoping and architecture decisions, including residual risk implications of carved-out certification environments and enclave boundaries.
• Improve operational and procedural aspects of the Cyber GR&C function: assessment methodology, intake, risk articulation standards, evidence handling, and consistency of risk judgments.
• Maintain current knowledge of the cyber risk, threat, technology, and regulatory landscape, and bring that currency into assessments and the team's capability.
• Travel up to 25 percent. Perform other position-related duties as assigned.

Skills

Cyber risk assessment

Risk articulation

NIST knowledge

Communication

Autonomy

Travel readiness

Education

Bachelors in Computer Science/Information Systems or related

Master's degree

Job description

Amentum is hiring a Senior Cybersecurity Risk Analyst for a US remote role. You will own enterprise cyber risk assessment work, framing risk for leadership and guiding risk-based decisions across networking, cloud, and identity domains.

Join a team focused on improving risk posture, integrating risk into architecture choices, and aligning with industry standards. Requires strong technical risk judgment and US citizenship.