Cybersecurity Senior Consultant

Crowe LLP•Indianapolis, IN

About The Position

At Crowe, you can build a meaningful and rewarding career with real flexibility to balance work with life moments. You are trusted to deliver results and make an impact, and the company embraces you for who you are, cares for your well-being, and nurtures your career. Everyone has equitable access to opportunities for career growth and leadership. Over its 80-year history, delivering excellent service through innovation has been a core part of Crowe's DNA across its audit, tax, and consulting groups. The company continuously invests in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance its services. Crowe LLP brings deep industry specialization and functional expertise to help organizations manage cybersecurity risk, protect sensitive information, and strengthen operational and business resilience. The firm is seeking a Cybersecurity Senior Consultant or Manager to join its growing team focused on evaluating cybersecurity and resilience capabilities and supporting the maturity of programs across clients’ environments. As a Senior Consultant or Manager, you will work directly with client stakeholders to understand cybersecurity and operational resilience needs; collaborate with engagement team members to plan and execute assessments and enable sustainable cybersecurity and resilience programs; and deliver actionable findings and recommendations that enhance security posture, regulatory compliance, and business continuity.

Requirements

Minimum of 3 years of total professional experience, including: At least 2 years of hands-on experience delivering cybersecurity or IT risk assessments.
Strong working knowledge of: Cybersecurity operations and controls, Data protection principles, HIPAA Security and Privacy Rule requirements
Demonstrated ability to independently manage engagements from planning through reporting with limited oversight.
Strong written and verbal communication skills, particularly in documenting observations and explaining results to diverse audiences.

Nice To Haves

One or more relevant professional certifications (e.g., CISSP, CISA, HCISPP, or equivalent).
Experience assessing or advising on: HIPAA compliance, Cybersecurity programs, Business continuity and disaster recovery, Operational or cyber resilience initiatives
Prior experience at a public accounting or advisory firm delivering cybersecurity, privacy, or resilience services to healthcare or life sciences organizations.

Responsibilities

Planning and executing cybersecurity and resilience assessments across technology and operational domains, including: Data protection and information governance, HIPAA Security and Privacy Rule assessments, Third-party and vendor risk management, Incident response, cyber resilience, and disaster recovery, Business continuity and operational resilience, Infrastructure and application security controls
Assessing the design and operating effectiveness of cybersecurity and resilience controls against applicable regulatory requirements and industry frameworks (e.g., HIPAA, NIST CSF, NIST SP 800-53, ISO 27001, etc).
Supporting integrated assessments that evaluate how cybersecurity controls enable broader business and operational resilience objectives.
Act as a strategic advisor to client security and risk functions, helping to build, enhance, and operationalize cybersecurity programs across domains such as governance, risk, and compliance (GRC) and business resiliency.
Serve as an extension of client teams to lead or support program execution activities, including control implementation, metrics/reporting, issue remediation, and continuous improvement initiatives.
Mentor and supervise junior consultants; contribute to team development and internal knowledge-sharing.
Preparing clear, thorough documentation, reports, and deliverables independently and on schedule.
Communicating assessment scope, procedures, findings, and recommendations to both technical and non-technical client stakeholders.
Maintaining engagement quality and responsiveness throughout the delivery lifecycle, ensuring client confidence and satisfaction.