Cyber Risk Internal Audit Manager — Hybrid & Growth

Grant Thornton (US); New York (NY); Hybrid; USD 138,000 - 173,000; Full time

Job summary

Grant Thornton (US) is seeking an IA Cybersecurity Risk Manager to join its Cybersecurity Internal Audit team. You will help clients improve their cybersecurity risk posture through audits, control testing, and maturity assessments, while mentoring junior staff and contributing to business development.

The role requires a Bachelor’s and ideally a Master’s in cybersecurity, 5+ years in cybersecurity or IT risk, and certifications such as CISA or CISSP. Travel to client sites will be required.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field is required.
• Master’s degree in Cybersecurity related field preferred.
• 5+ years of experience in Cybersecurity, internal audit, or IT risk.
• CISA, CISSP or similar professional certifications required.
• Experience as a client-serving professional for a consulting firm desired.

Responsibilities

• Assist in planning and executing Cybersecurity internal audits, risk assessments, and control testing engagements.
• Lead walkthroughs, interviews, and workshops with client stakeholders to understand security processes and technology environments.
• Perform Cybersecurity control testing and Cybersecurity program capability assessments.
• Conduct Cybersecurity maturity assessments using frameworks such as NIST CSF, CSA CCM, ISO/IEC 27001, COBIT, and HITRUST.
• Support assessments for regulatory compliance including HIPAA, FedRAMP, GLBA, GDPR, and state-led data breach notification laws.
• Document process, risk and control improvement considerations, develop risk-based recommendations, and develop client deliverables.
• Identify emerging technology risks (i.e., AI, Cloud, Quantum-computing risks)...
• Develop roadmaps to help clients mitigate Cyber risks and enhance overall Cybersecurity posture.
• Stay current on Cybersecurity trends, threat landscapes, and regulatory developments.
• Provide mentorship and training to junior team members and support their professional development.
• Contribute to project management tasks such as scheduling, documentation, and status reporting.
• Support client engagements from start to finish, including planning, fieldwork, and reporting.

Skills

CISA

CISSP

Cybersecurity experience

Risk assessment

Internal audit

Education

Bachelor's degree in Cybersecurity/IT/CS

Master's degree in Cybersecurity related field

Job description

Grant Thornton (US) is seeking an IA Cybersecurity Risk Manager to join its Cybersecurity Internal Audit team. You will help clients improve their cybersecurity risk posture through audits, control testing, and maturity assessments, while mentoring junior staff and contributing to business development.

The role requires a Bachelor’s and ideally a Master’s in cybersecurity, 5+ years in cybersecurity or IT risk, and certifications such as CISA or CISSP. Travel to client sites will be required.