Cyber Security Assessment Manager - Digital Assets

Crowe•Washington, DC

9d•$104,500 - $213,800

About The Position

Crowe is seeking a Cybersecurity Manager to help financial institutions, fintech companies, payments providers, and other financial-services organizations manage cybersecurity risk in a rapidly evolving technology and regulatory environment. The successful candidate will bring a strong foundation in financial-services cybersecurity, technology risk, or IT risk management, along with broad exposure to emerging areas such as digital assets, blockchain, stablecoins, tokenized assets, cryptocurrency custody, embedded finance, and Banking-as-a-Service. This position does not require deep engineering expertise across every emerging technology. It does require the ability to understand how these technologies and business models operate, recognize their cybersecurity and operational-resilience implications, ask the right questions, and translate complex risks into practical recommendations for clients.

Requirements

Five or more years of professional experience in cybersecurity, technology risk, IT audit, security consulting, or a related field.
Experience working in or serving the financial-services industry, such as banking, fintech, payments, capital markets, asset management, insurance, or financial-market infrastructure.
Broad exposure to emerging financial technologies and business models, which may include digital assets, cryptocurrency, blockchain, stablecoins, tokenization, digital-asset custody, embedded finance, payments innovation, or Banking-as-a-Service.
Ability to identify and explain the cybersecurity, third-party-risk, data-protection, compliance, and operational-resilience implications of emerging financial technologies.
Strong knowledge of cybersecurity governance and controls, including identity and access management, data protection, cloud and application security, third-party risk, incident response, and business continuity.
Demonstrated ability to learn unfamiliar technologies and business processes, identify relevant risks, and apply established cybersecurity and control principles.
Experience managing cybersecurity or technology-risk engagements from planning through reporting.
Strong written, verbal, project-management, and client-relationship skills.
Bachelor's degree or equivalent relevant professional experience.
One or more professional certifications such as CISSP, CISM, CRISC, or an equivalent cybersecurity credential.

Nice To Haves

Direct experience assessing or advising on one or more emerging areas, such as digital-asset platforms, blockchain-based products, stablecoins, tokenized assets, custody solutions, payments innovation, embedded finance, or Banking-as-a-Service.
Familiarity with security concepts associated with wallet architecture, cryptographic-key management, blockchain infrastructure, smart contracts, APIs, or digital-asset transaction platforms.
Experience working for or advising a regulated bank, fintech company, payments provider, technology company, digital-asset business, or professional-services firm.
Familiarity with financial-services regulatory expectations and frameworks such as FFIEC, GLBA, NYDFS Cybersecurity Regulation, NIST CSF, ISO 27001, SOC 2, or PCI DSS.

Responsibilities

Lead cybersecurity, technology-risk, and operational-resilience engagements for banks, fintech companies, payments providers, and organizations developing or supporting emerging financial products.
Evaluate the cybersecurity implications of evolving technologies and business models, including digital assets, blockchain platforms, stablecoins, tokenized assets, cryptocurrency custody, embedded finance, and Banking-as-a-Service.
Assess risks related to areas such as digital-asset custody, cryptographic-key management, wallet infrastructure, smart-contract dependencies, blockchain infrastructure, APIs, third-party integrations, cloud platforms, transaction integrity, and access controls.
Help clients understand how established cybersecurity principles apply to new products, technologies, partnerships, and delivery models.
Evaluate cybersecurity governance, control design, third-party risk, incident response, business continuity, and operational resilience across interconnected financial-services ecosystems.
Advise clients on relationships among banks, fintech companies, program managers, technology providers, digital-asset custodians, and other critical third parties.
Assess cybersecurity programs against applicable regulatory expectations and industry frameworks, including FFIEC, GLBA, NYDFS Cybersecurity Regulation, NIST CSF, ISO 27001, PCI DSS, and other relevant guidance.
Communicate emerging risks and their business implications clearly to executives, risk committees, technical teams, and other client stakeholders.
Manage engagements from planning through reporting, including scope, team oversight, client communication, quality, timelines, and budgets.
Mentor junior professionals and contribute to the continued development of Crowe's financial-services cybersecurity capabilities.