Senior Remote Enterprise Cyber Risk Assessor

Amentum; United States; Remote; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401(k) matching

Educational reimbursement

Paid time off

Job summary

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote role. You will own enterprise cyber risk assessment work and translate risk into business terms for leadership in alignment with risk appetite.

You will evaluate technology decisions across networking, cloud, endpoints, and identity, working with GR&C to ensure cohesive risk management. Travel up to 25% may be required.

Qualifications

• Typically 8 years of hands-on cybersecurity experience with a degree; or 4 years with a Master’s.
• Experience in enterprise risk management and third‑party cyber risk assessments.
• Current Security+ or equivalent certification.
• Must be a U.S. Citizen.
• U.S. Remote-Telework role; must reside within the United States.

Responsibilities

• Conduct cyber risk assessments across the enterprise, identifying risk to confidentiality, integrity, and availability of systems and data.
• Articulate cyber risk to business and technical leadership in decision-ready terms against the enterprise risk appetite.
• Lead cyber risk reviews across various assessment types and track enterprise AI development as it relates to cyber risk.
• Coordinate with Compliance to ensure coherent risk treatment across frameworks.
• Evaluate cyber risk implications of technology decisions across networking, cloud, endpoint, and identity architectures.
• Identify when residual risk exceeds appetite and specify risk reduction.

Skills

Cyber risk assessment

Articulate risk to leadership

NIST knowledge

Networking/cloud/endpoint risk

Autonomous problem solving

US Citizenship

Travel up to 25%

Education

Bachelor's degree in Computer Science/Information Systems or related field

Master's degree

Tools

Microsoft Azure

Entra ID

Security+ certification

Job description

Amentum is seeking a Senior Cybersecurity Risk Analyst for a US remote role. You will own enterprise cyber risk assessment work and translate risk into business terms for leadership in alignment with risk appetite.

You will evaluate technology decisions across networking, cloud, endpoints, and identity, working with GR&C to ensure cohesive risk management. Travel up to 25% may be required.