Senior Cyber Risk Specialist

Munro Footwear Group; Helena (MT); Hybrid; USD 54,000 - 56,000; Full time

Benefits offered by this job

Health Coverage

Paid Leave & Holidays

Public Service Loan Forgiveness (PSLF)

Job summary

State Information Technology Services Division (SITSD) within the State of Montana is seeking an experienced Risk Specialist to advance centralized cybersecurity risk management, perform risk assessments, and translate findings into actionable decisions.

The role spans a federated state environment to maintain risk records, support policy alignment, and guide stakeholders in plain language across technical and business domains.

Qualifications

• Associate degree in cybersecurity, IT, IA, business, public admin, or related field.
• 4 years of experience in cybersecurity risk management, information security, compliance, audit, security assessment, or related field.
• Experience leading risk assessments, complex control assessments, or audits.
• Alternate combinations of education, experience, and relevant certifications will be considered on a case-by-case basis.

Responsibilities

• Execute cybersecurity risk management processes and assessments.
• Document risk conditions and maintain risk records and reports.
• Evaluate design and effectiveness of security controls.
• Provide practical guidance aligning with statewide standards.

Skills

Risk management

Communication

Stakeholder management

Risk assessment

Leadership

Education

Associate degree in cybersecurity / IT / IA / Business / Public Admin

Bachelor's degree preferred

Tools

GRC platforms

Vulnerability management tools

Spreadsheets

Ticketing systems

Job description

State Information Technology Services Division (SITSD) within the State of Montana is seeking an experienced Risk Specialist to advance centralized cybersecurity risk management, perform risk assessments, and translate findings into actionable decisions.

The role spans a federated state environment to maintain risk records, support policy alignment, and guide stakeholders in plain language across technical and business domains.