Senior Cyber Risk Specialist

State of Montana; East Helena (MT); Hybrid; USD 80,000 - 110,000; Full time

Benefits offered by this job

Health Coverage

Retirement plans

Paid Vacation and Sick Leave and Holl-

Public Service Loan Forgiveness (PSLF)

Job summary

The State of Montana, Department of Administration, SITSD in Helena, invites applications for an experienced Risk Specialist. You will support centralized cybersecurity by executing risk management, conducting assessments, documenting risk conditions, maintaining risk registers, and translating findings into actionable treatment decisions for agencies across the federated state environment.

You will analyze threats, evaluate control effectiveness, mentor teams, and communicate risk in plain

Qualifications

• Associate degree in Cybersecurity, IT, IA, Business, or related field.
• 4 years of cybersecurity risk management, information security, compliance, audit, or related field.
• Experience leading risk assessments or audits.
• Alternate combos considered.

Responsibilities

• Execute cybersecurity risk management processes across the federated state environment.
• Conduct risk assessments, document risk conditions, and maintain risk registers and reports.
• Evaluate control effectiveness and translate findings into actionable treatment options (avoid, mitigate, transfer, accept).
• Assist policy and compliance alignment and provide practical guidance.
• Communicate risk in plain language to technical, operational, and business stakeholders.

Skills

Cybersecurity risk mgmt

Risk assessments

Communication

Leadership

GRC platforms

Plain-language

Education

Associate degree in Cybersecurity

4+ years experience

Bachelor's degree preferred

Tools

GRC platforms

Vulnerability tools

Spreadsheets

Ticketing systems

Job description

The State of Montana, Department of Administration, SITSD in Helena, invites applications for an experienced Risk Specialist. You will support centralized cybersecurity by executing risk management, conducting assessments, documenting risk conditions, maintaining risk registers, and translating findings into actionable treatment decisions for agencies across the federated state environment.

You will analyze threats, evaluate control effectiveness, mentor teams, and communicate risk in plain