Cyber Security Assessment Manager

crowe; Livingston (NJ); On-site; USD 120,000 - 150,000; Full time

Job summary

Crowe LLP is seeking a seasoned Auditor to lead internal cybersecurity and IT audit engagements for financial services clients in the United States. You will plan, execute, and report on audits of cybersecurity controls, IT infrastructure, and governance processes with a focus on regulatory alignment.

The role emphasizes collaboration across teams, strong written and verbal communication, and the ability to deliver high‑quality findings that enhance client security and compliance posture.

Qualifications

• 5+ years of total professional experience in auditing or consulting.
• 3+ years of hands-on internal audits in cybersecurity, ITGC, or infrastructure risk.
• Strong knowledge of cybersecurity controls and governance practices.
• Ability to complete audits from planning through reporting with minimal oversight.
• Excellent written and verbal communication of observations to clients.

Responsibilities

• Plan and execute internal audits across cybersecurity and IT infrastructure domains.
• Assess controls against regulatory expectations and industry frameworks (e.g., NIST CSF, COBIT, ISO 27001).
• Prepare audit documentation, reports, and deliverables independently and on schedule.
• Communicate procedures, findings, and recommendations to client stakeholders.
• Contribute to client relationships and account planning within financial services clients.

Skills

Cybersecurity auditing

IT general controls

Regulatory knowledge

Audit planning

Client communication

Education

Bachelor's degree

Job description

Your Journey at Crowe Starts Here:

At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you're trusted to deliver results and make an impact. We embrace you for who you are, care for your well-being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That's why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services. Join us at Crowe and embark on a career where you can help shape the future of our industry.

Job Description:

What It Means to Be a Consultant at Crowe

Consulting is a dynamic business focused on solving problems for our clients and serving our core markets through innovative solutions. As technology and AI continue to reshape the consulting landscape, we are looking for individuals who are curious, adaptable, and eager to learn. At Crowe, consultants are expected to build both technical and transferable skills, think critically, and use technology to solve real business problems. In this role, you will continuously learn, collaborate across teams, and explore how tools, including emerging AI capabilities, can improve efficiency, insights, and client outcomes.

In management at Crowe, you play a pivotal role in leading teams, guiding project execution, and deepening client relationships. You are expected to contribute to account planning, identify opportunities to add value, and ensure high-quality delivery. As your responsibilities expand, you take on broader account ownership, balancing project leadership with growing involvement in client strategy and solution development.

Success in this role comes from a growth mindset, strong communication skills, advanced critical thinking, and the ability to navigate new challenges with confidence.

At Crowe LLP, we bring deep industry specialization and functional expertise to help financial institutions stay ahead of evolving risks. We are seeking a Financial Services Cybersecurity Internal Audit Manager to join our growing team of professionals focused on delivering high-quality, technically rigorous internal audit services in the cybersecurity domain.

As a Cyber Security Assessment Manager , you will work directly with client stakeholders to understand their cybersecurity internal audit needs, collaborate with internal audit team members to plan and execute engagements, and deliver high-quality findings and recommendations that enhance the client's security posture and compliance efforts.

What You'll Do

You will play a critical role in independently delivering internal audits and advisory engagements across a variety of financial services clients. Your responsibilities will include:

• Planning and executing internal audits across cybersecurity and IT infrastructure domains, including:
• Security Operations Centers (SOC)
• Data Services and Data Governance
• Third Party Risk Management (TPRM)
• Cyber Resilience and Incident Response
• Infrastructure risk control frameworks, including second line of defense (2LOD) review
• Infrastructure-level Incident and Problem Management
• Integrated Cyber Auditing alongside business and operational auditors
• Assessing design and operational effectiveness of technical cybersecurity controls against regulatory expectations and industry frameworks (e.g., NIST CSF, COBIT, ISO 27001).
• Preparing thorough audit documentation, reports, and deliverables independently and on schedule.
• Communicating audit procedures, findings, and recommendations directly to client stakeholders, including both technical and non-technical audiences.
• Maintaining audit quality and responsiveness throughout the engagement lifecycle, ensuring client satisfaction and confidence.

Basic Qualifications

• Minimum of 5 years of total professional experience.
• At least 3 years of hands‑on experience performing internal audits, specifically in cybersecurity, IT general controls, or infrastructure risk within a financial services or consulting environment.
• Strong working knowledge of cybersecurity operations, controls, and governance practices.
• Demonstrated ability to independently complete audits from planning through reporting, with minimal oversight.
• Excellent written and verbal communication skills, especially in documenting observations and explaining results to clients.
• Bachelor's degree
• One or more relevant professional certifications: CISSP, CISA, or equivalent.

Preferred Qualifications

• Experience working with or auditing financial services regulations and guidelines (e.g., OCC, FDIC, FFIEC, NYDFS).
• Prior experience at a public accounting or advisory firm delivering internal audit services to banking, insurance, or fintech clients.

We expect the candidate to uphold Crowe's values of Care, Trust, Courage, and Stewardship.

T