Cyber Security Assessment Manager

Crowe•Washington, DC

1d•$104,500 - $213,800

About The Position

Crowe is seeking a Financial Services Cybersecurity Internal Audit Manager to join their growing team. This role focuses on delivering high-quality, technically rigorous internal audit services in the cybersecurity domain for financial institutions. As a Cyber Security Assessment Manager, you will work directly with client stakeholders to understand their cybersecurity internal audit needs, collaborate with internal audit team members to plan and execute engagements, and deliver high-quality findings and recommendations that enhance the client's security posture and compliance efforts. Consultants at Crowe are expected to build both technical and transferable skills, think critically, and use technology to solve real business problems. In management, you play a pivotal role in leading teams, guiding project execution, and deepening client relationships. Success in this role comes from a growth mindset, strong communication skills, advanced critical thinking, and the ability to navigate new challenges with confidence.

Requirements

Minimum of 5 years of total professional experience.
At least 3 years of hands-on experience performing internal audits, specifically in cybersecurity, IT general controls, or infrastructure risk within a financial services or consulting environment.
Strong working knowledge of cybersecurity operations, controls, and governance practices.
Demonstrated ability to independently complete audits from planning through reporting, with minimal oversight.
Excellent written and verbal communication skills, especially in documenting observations and explaining results to clients.
Bachelor’s degree
One or more relevant professional certifications: CISSP, CISA, or equivalent.

Nice To Haves

Experience working with or auditing financial services regulations and guidelines (e.g., OCC, FDIC, FFIEC, NYDFS).
Prior experience at a public accounting or advisory firm delivering internal audit services to banking, insurance, or fintech clients.

Responsibilities

Independently deliver internal audits and advisory engagements across a variety of financial services clients.
Plan and execute internal audits across cybersecurity and IT infrastructure domains, including Security Operations Centers (SOC), Data Services and Data Governance, Third Party Risk Management (TPRM), Cyber Resilience and Incident Response, infrastructure risk control frameworks (including second line of defense review), and Infrastructure-level Incident and Problem Management.
Perform Integrated Cyber Auditing alongside business and operational auditors.
Assess the design and operational effectiveness of technical cybersecurity controls against regulatory expectations and industry frameworks (e.g., NIST CSF, COBIT, ISO 27001).
Prepare thorough audit documentation, reports, and deliverables independently and on schedule.
Communicate audit procedures, findings, and recommendations directly to client stakeholders, including both technical and non-technical audiences.
Maintain audit quality and responsiveness throughout the engagement lifecycle, ensuring client satisfaction and confidence.