Financial Services Cybersecurity Senior Consultant

Crowe•Los Angeles, CA

19d

About The Position

Crowe is seeking a Financial Services Cybersecurity Senior Consultant to help financial institutions navigate evolving cyber threats, regulatory expectations, and technology risks by delivering practical, risk-based cybersecurity solutions. This role focuses on second-line cybersecurity and technology risk management and advisory. The consultant will work with various financial services organizations to assess and enhance their cybersecurity governance, risk management, and oversight programs. Key responsibilities include advising on regulatory readiness, cyber risk and control frameworks, risk appetite and reporting, issue management, cyber resilience, and emerging technology risks like AI. The role involves leading and supporting assessments, program enhancements, and transformation initiatives, assessing governance, policies, standards, risk frameworks, metrics, issue management, and reporting. The consultant will also advise on regulatory expectations and industry frameworks, provide expertise in areas like IAM, data protection, cloud security, third-party risk, vulnerability management, incident response, and cyber resilience, and support regulatory readiness and examinations. The role requires serving as a trusted advisor, communicating risks clearly to various stakeholders, leading engagement workstreams, mentoring junior team members, and contributing to practice and solution development.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, Risk Management, Finance, or a related field.
2+ years of experience in cybersecurity, technology risk, information security, regulatory advisory, or related consulting or industry roles.
Experience working with or supporting financial services organizations or other highly regulated environments.
Understanding of second-line risk management, including risk assessment, oversight and challenge, issue management, risk appetite, governance, and reporting.
Knowledge of cybersecurity frameworks and financial services regulatory expectations.
Strong analytical, project management, written communication, and executive presentation skills.
Ability to translate technical cybersecurity risks into clear business and risk implications.

Nice To Haves

Experience in a second-line cybersecurity or technology risk function within banking, insurance, asset/wealth management, capital markets, fintech, or another financial services organization.
Knowledge of FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, and other financial services regulatory expectations.
Experience with cybersecurity domains such as IAM, cloud security, data protection, third-party risk, vulnerability management, cyber resilience, and incident response.
Experience supporting regulatory examinations, cybersecurity program assessments, remediation programs, or risk transformation initiatives.
Experience developing or enhancing cybersecurity risk appetite, KRIs, metrics, executive reporting, and board reporting.
Certifications such as CISSP, CISM, CRISC, or similar credentials.
Experience with emerging technology risks, including AI governance, AI risk management, and secure adoption of AI technologies.

Responsibilities

Lead and support second-line cybersecurity and technology risk assessments, program enhancements, and transformation initiatives.
Assess cybersecurity governance, policies and standards, risk and control frameworks, risk appetite, metrics/KRIs, issue management, and executive and board reporting.
Advise clients on financial services regulatory expectations and industry frameworks, including FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, NIST CSF, NIST 800-53, and CIS Controls.
Provide cybersecurity risk expertise across areas such as IAM, data protection, cloud security, third-party risk, vulnerability management, incident response, and cyber resilience.
Support cybersecurity regulatory readiness, examinations, remediation efforts, and responses to regulatory findings.
Serve as a trusted advisor and extension of client CISO, cybersecurity risk, technology risk, and enterprise risk teams, providing effective second-line oversight and challenge.
Communicate cybersecurity risks, findings, and recommendations clearly to technical teams, senior executives, and board-level stakeholders.
Lead engagement workstreams, mentor junior team members, and contribute to financial services cybersecurity practice and solution development.