Senior Cyber Risk Strategist - Remote US

Amentum; Chantilly (VA); Hybrid; USD 110,000 - 130,000; Full time

Job summary

Amentum in Chantilly, Virginia, is seeking a Senior Cybersecurity Risk Analyst for US remote work. This senior role leads enterprise cyber risk assessments and frames risk for business leaders within the Cybersecurity Governance, Risk, and Compliance (GR&C) team.

The position emphasizes assessment over pure compliance, working with Compliance to drive cohesive risk management across the enterprise. It requires strong technical judgment across networking, cloud, and identity, and US citizenship.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with a Bachelor's degree, or 4 years with a Master's.
• Experience in enterprise risk management and third-party cyber risk assessment.
• Current Security+ or equivalent certification.
• US Citizenship required.
• US Remote-Telework; reside in the United States.

Responsibilities

• Conduct cyber risk assessments across the enterprise, identifying risk to confidentiality, integrity, and availability.
• Articulate cyber risk to business and technical leadership in clear, decision-ready terms.
• Take lead on cyber risk reviews, including third-party risk and software risk reviews.
• Collaborate with Compliance to ensure coherent risk treatment across frameworks.
• Evaluate risk implications of networking, cloud, endpoint, and identity decisions.
• Indicate residual risk and necessary risk reductions.
• Improve GR&C processes, evidence handling, and risk judgments consistency.
• Stay current on cyber risk, threat, technology, and regulatory developments.
• Travel up to 25%.

Skills

Cyber risk assessment

Risk communication

NIST knowledge

Cloud/Networking knowledge

Travel readiness

Education

Bachelor's degree in CS/IS

Advanced degree (MS) in related field

Tools

Security+ certification

Azure / Azure Government

Job description

Amentum in Chantilly, Virginia, is seeking a Senior Cybersecurity Risk Analyst for US remote work. This senior role leads enterprise cyber risk assessments and frames risk for business leaders within the Cybersecurity Governance, Risk, and Compliance (GR&C) team.

The position emphasizes assessment over pure compliance, working with Compliance to drive cohesive risk management across the enterprise. It requires strong technical judgment across networking, cloud, and identity, and US citizenship.