Cybersecurity Manager

Crowe; Grand Rapids (MI); On-site; USD 105,000 - 214,000; Full time

Job summary

Crowe Consulting is seeking a seasoned cybersecurity consultant in the United States to help clients strengthen data protection and resilience. You will conduct risk assessments, advise on controls, and mentor junior staff while delivering clear, actionable results.

The role focuses on governance, risk, and compliance, including HIPAA and NIST frameworks, with strong communication and problem‑solving skills essential for success.

Qualifications

• 5+ years of total professional experience
• 4+ years delivering cybersecurity or IT risk assessments
• Strong knowledge of cybersecurity operations and controls
• Data protection principles and HIPAA requirements
• Ability to independently manage engagements from planning through reporting
• Strong written and verbal communication skills; able to explain results to diverse audiences
• Bachelor’s degree and relevant professional certifications (e.g., CISSP, CISA, HCISPP)

Responsibilities

• Plan and conduct cybersecurity and resilience assessments across technology and operations
• Act as strategic advisor to client security and risk functions
• Lead or support program execution activities including controls, metrics, and remediation
• Mentor junior consultants and contribute to team knowledge sharing
• Prepare comprehensive documentation and deliverables with clear findings and recommendations
• Communicate assessment scope and results to technical and non‑technical stakeholders
• Maintain engagement quality and client satisfaction throughout delivery lifecycle

Skills

Cybersecurity operations

Data protection

HIPAA compliance

Engagement management

Communication skills

Education

Bachelor's degree

Job description

Your Journey at Crowe Starts Here

At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you’re trusted to deliver results and make an impact. We embrace you for who you are, care for your well‑being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That’s why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services. Join us at Crowe and embark on a career where you can help shape the future of our industry.

Job Description

What It Means To Be a Consultant At Crowe Consulting is a dynamic business focused on solving problems for our clients and serving our core markets through innovative solutions. As technology and AI continue to reshape the consulting landscape, we are looking for individuals who are curious, adaptable, and eager to learn. At Crowe, consultants are expected to build both technical and transferable skills, think critically, and use technology to solve real business problems. In this role, you will continuously learn, collaborate across teams, and explore how tools, including emerging AI capabilities, can improve efficiency, insights, and client outcomes. In management at Crowe, you play a pivotal role in leading teams, guiding project execution, and deepening client relationships. You are expected to contribute to account planning, identify opportunities to add value, and ensure high-quality delivery. As your responsibilities expand, you take on broader account ownership, balancing project leadership with growing involvement in client strategy and solution development. Success in this role comes from a growth mindset, strong communication skills, advanced critical thinking, and the ability to navigate new challenges with confidence.

What You’ll Do

Responsibilities include:

• Planning and executing cybersecurity and resilience assessments across technology and operational domains, including:
  • Data protection and information governance
  • HIPAA Security and Privacy Rule assessments
  • Third‑party and vendor risk management
  • Incident response, cyber resilience, and disaster recovery
  • Business continuity and operational resilience
  • Infrastructure and application security controls
  • Assessing the design and operating effectiveness of cybersecurity and resilience controls against applicable regulatory requirements and industry frameworks (e.g., HIPAA, NIST CSF, NIST SP 800-53, ISO 27001, etc.)
  • Supporting integrated assessments that evaluate how cybersecurity controls enable broader business and operational resilience objectives.
  • Act as a strategic advisor to client security and risk functions, helping to build, enhance, and operationalize cybersecurity programs across domains such as governance, risk, and compliance (GRC) and business resiliency.
  • Serve as an extension of client teams to lead or support program execution activities, including control implementation, metrics/reporting, issue remediation, and continuous improvement initiatives.
  • Mentor and supervise junior consultants; contribute to team development and internal knowledge‑sharing.
  • Preparing clear, thorough documentation, reports, and deliverables independently and on schedule.
  • Communicating assessment scope, procedures, findings, and recommendations to both technical and non‑technical client stakeholders.
  • Maintaining engagement quality and responsiveness throughout the delivery lifecycle, ensuring client confidence and satisfaction.

Basic Qualifications

• Minimum of 5 years of total professional experience
• 4+ years of hands‑on experience delivering cybersecurity or IT risk assessments
• Strong working knowledge of:
  • Cybersecurity operations and controls
  • Data protection principles
  • HIPAA Security and Privacy Rule requirements
• Demonstrated ability to independently manage engagements from planning through reporting with limited oversight
• Strong written and verbal communication skills, particularly in documenting observations and explaining results to diverse audiences
• Bachelor’s degree
• One or more relevant professional certifications (e.g., CISSP, CISA, HCISPP, or equivalent)

Preferred Qualifications

• Experience assessing or advising on:
  • Department of Defense Cybersecurity Maturity Model Certification (CMMC)
  • HIPAA compliance
  • Cybersecurity programs
  • Business continuity and disaster recovery
  • Operational or cyber resilience initiatives
  • Prior experience at a public accounting or advisory firm delivering cybersecurity, privacy, or resilience services to healthcare or life sciences organizations

We expect the candidate to uphold Crowe’s values of Care, Trust, Courage, and Stewardship. These values define who we are. We expect all of our people to act ethically and with integrity at all times.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. Crowe is not sponsoring for work authorization at this time.

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Crowe, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $104,500.00 - $213,800.00 per year.

Our Benefits

Your exceptional people experience starts here. At Crowe, we know that great people are what makes a great firm. We care about our people and offer employees a comprehensive total rewards package. Learn more about what working at Crowe can mean for you!

How You Can Grow

We will nurture your talent in an inclusive culture that values diversity. You will have the chance to meet on a consistent basis with your Career Coach that will guide you in your career goals and aspirations. Learn more about where talent can prosper!

More about Crowe

Crowe provides professional services through two separate entities: Crowe LLP delivers audit and attest services, and Crowe Advisory LLC provides tax, advisory, consulting, and other nonattest services. The Crowe Global network consists of more than 300 independent accounting and advisory services firms in more than 150 countries around the globe, making it one of the largest accounting networks in the world.* As independent members of Crowe Global, Crowe LLP and Crowe Advisory LLC serve clients worldwide. As of