Financial Services Cybersecurity Senior Consultant

Crowe•Boston, MA

2d•$80,500 - $159,300

About The Position

Consulting is a dynamic business focused on solving problems for our clients and serving our core markets through innovative solutions. As technology and AI continue to reshape the consulting landscape, we are looking for individuals who are curious, adaptable, and eager to learn. At Crowe, consultants are expected to build both technical and transferable skills, think critically, and use technology to solve real business problems. In this role, you will continuously learn, collaborate across teams, and explore how tools, including emerging AI capabilities, can improve efficiency, insights, and client outcomes. As you grow, you’ll also begin to take ownership of client relationships, contribute to account strategy, and support the delivery of high-impact work. Developing a sense of account leadership, including understanding client needs, ensuring delivery excellence, and building trusted partnerships, is part of what sets successful consultants apart. Success in this role comes from a growth mindset, strong communication skills, advanced critical thinking, and the ability to navigate new challenges with confidence. As a Financial Services Cybersecurity Senior Consultant, you will help financial institutions navigate evolving cyber threats, regulatory expectations, and technology risks by delivering practical, risk-based cybersecurity solutions. This role is focused on second-line cybersecurity and technology risk management and advisory, not internal audit. You will work with banks, insurers, asset and wealth managers, fintechs, and other financial services organizations to assess and enhance cybersecurity governance, risk management, and oversight programs. You will advise clients on regulatory readiness, cyber risk and control frameworks, risk appetite and reporting, issue management, cyber resilience, and emerging technology risks, including AI.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, Risk Management, Finance, or a related field.
2+ years of experience in cybersecurity, technology risk, information security, regulatory advisory, or related consulting or industry roles.
Experience working with or supporting financial services organizations or other highly regulated environments.
Understanding of second-line risk management, including risk assessment, oversight and challenge, issue management, risk appetite, governance, and reporting.
Knowledge of cybersecurity frameworks and financial services regulatory expectations.
Strong analytical, project management, written communication, and executive presentation skills.
Ability to translate technical cybersecurity risks into clear business and risk implications.

Nice To Haves

Experience in a second-line cybersecurity or technology risk function within banking, insurance, asset/wealth management, capital markets, fintech, or another financial services organization.
Knowledge of FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, and other financial services regulatory expectations.
Experience with cybersecurity domains such as IAM, cloud security, data protection, third-party risk, vulnerability management, cyber resilience, and incident response.
Experience supporting regulatory examinations, cybersecurity program assessments, remediation programs, or risk transformation initiatives.
Experience developing or enhancing cybersecurity risk appetite, KRIs, metrics, executive reporting, and board reporting.
Certifications such as CISSP, CISM, CRISC, or similar credentials.
Experience with emerging technology risks, including AI governance, AI risk management, and secure adoption of AI technologies.

Responsibilities

Lead and support second-line cybersecurity and technology risk assessments, program enhancements, and transformation initiatives.
Assess cybersecurity governance, policies and standards, risk and control frameworks, risk appetite, metrics/KRIs, issue management, and executive and board reporting.
Advise clients on financial services regulatory expectations and industry frameworks, including FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, NIST CSF, NIST 800-53, and CIS Controls.
Provide cybersecurity risk expertise across areas such as IAM, data protection, cloud security, third-party risk, vulnerability management, incident response, and cyber resilience.
Support cybersecurity regulatory readiness, examinations, remediation efforts, and responses to regulatory findings.
Serve as a trusted advisor and extension of client CISO, cybersecurity risk, technology risk, and enterprise risk teams, providing effective second-line oversight and challenge.
Communicate cybersecurity risks, findings, and recommendations clearly to technical teams, senior executives, and board-level stakeholders.
Lead engagement workstreams, mentor junior team members, and contribute to financial services cybersecurity practice and solution development.