Senior Cybersecurity Risk Analyst - Remote (US)

Amentum; City of Albany (NY); Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is a global leader in advanced engineering and technology solutions. The Senior Cybersecurity Risk Analyst is a US remote, senior individual contributor position within the Cybersecurity Governance, Risk, and Compliance team.

This role owns the enterprise's cyber risk assessment work and frames risk for leadership. The role requires strong technical judgment across networking, cloud, endpoint, and identity decisions and collaboration with governance and compliance.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with depth in evaluating real technology environments.
• Demonstrated experience in enterprise risk management and third-party cyber risk assessment.
• Current Security+ or an equivalent industry certification. U.S. Citizenship required.
• U.S. Remote-Telework role; must reside within the United States.

Responsibilities

• Conduct cyber risk assessments across the enterprise, identifying risk to confidentiality, integrity, and availability.
• Articulate cyber risk to business and technical leadership in decision-ready terms.
• Lead cyber risk reviews across third-party risk, risk acceptance, and software risk.
• Ensure risk treatment is coherent across frameworks with Compliance.
• Evaluate risk implications of networking, cloud, endpoint, and identity decisions.

Skills

Cyber risk awareness

Risk articulation

NIST guidelines

Written & verbal communication

Autonomy

Travel up to 25%

Education

Bachelor's degree in CS/IS or related field

Master's degree plus experience

Job description

Amentum is a global leader in advanced engineering and technology solutions. The Senior Cybersecurity Risk Analyst is a US remote, senior individual contributor position within the Cybersecurity Governance, Risk, and Compliance team.

This role owns the enterprise's cyber risk assessment work and frames risk for leadership. The role requires strong technical judgment across networking, cloud, endpoint, and identity decisions and collaboration with governance and compliance.