Cyber Security Assessment Manager — Lead Internal Audits & Risk

Crowe; San Jose (CA); On-site; USD 105,000 - 214,000; Full time

Job summary

Crowe is seeking a Financial Services Cybersecurity Internal Audit Manager to lead internal audits for banking, insurance, and fintech clients. You will plan, execute, and report audits across cybersecurity controls and IT infrastructure, collaborating with stakeholders to strengthen security posture and regulatory compliance.

The role requires 5+ years of experience, CISSP/CISA or equivalent, and strong communication skills.

Qualifications

• Minimum of 5 years of total professional experience.
• At least 3 years of hands-on experience performing internal audits, specifically in cybersecurity, IT general controls, or infrastructure risk within a financial services or consulting environment.
• Strong working knowledge of cybersecurity operations, controls, and governance practices.
• Demonstrated ability to independently complete audits from planning through reporting, with minimal oversight.
• Excellent written and verbal communication skills, especially in documenting observations and explaining results to clients.
• One or more relevant professional certifications: CISSP, CISA, or equivalent.

Responsibilities

• Plan and execute internal audits across cybersecurity and IT infrastructure domains within financial services or consulting environments.
• Communicate audit procedures, findings, and recommendations to client stakeholders, including technical and non-technical audiences.
• Maintain audit quality and timeliness throughout the engagement lifecycle, ensuring client satisfaction.
• Prepare audit documentation, reports, and deliverables independently and on schedule.

Education

Bachelor's degree

Job description

Crowe is seeking a Financial Services Cybersecurity Internal Audit Manager to lead internal audits for banking, insurance, and fintech clients. You will plan, execute, and report audits across cybersecurity controls and IT infrastructure, collaborating with stakeholders to strengthen security posture and regulatory compliance.

The role requires 5+ years of experience, CISSP/CISA or equivalent, and strong communication skills.