Lead Third-Party Risk & InfoSec Programs

Crowe-Global; Charlotte (NC); Hybrid; USD 101,000 - 207,000; Full time

Benefits offered by this job

Hybrid work model

Competitive benefits

Job summary

Crowe-Global is seeking a Senior Third-Party Risk Manager to lead assessments of information security postures for key clients. You will guide teams across client sites and vendor engagements, identifying risks and remediation strategies, while mentoring junior staff.

The role requires strong leadership, critical thinking, and the ability to communicate effectively with client leadership and technical teams. A background in IT/cybersecurity and relevant certifications are preferred.

Qualifications

• Bachelor’s Degree in IT and/or Cybersecurity or related field.
• 5–8+ years IT, cybersecurity, or risk management experience.
• Experience with third-party risk assessments and risk controls.
• Knowledge of security domains: policy, identity, cloud security, etc.
• Familiarity with SOC 2, NIST, HIPAA, PCI DSS, HITRUST recommended.

Responsibilities

• Lead third-party risk assessments and evaluate questionnaire responses.
• Manage assessment teams, timelines, and client deliverables.
• Perform site visits to third-party facilities and document findings.
• Evaluate security controls for policy compliance and regulatory requirements.
• Prepare executive-level reports and remediation recommendations.
• Coordinate schedules and oversee multiple engagements.

Skills

IT risk management

Cybersecurity

Third-party risk

Project leadership

Communication skills

Education

Bachelor’s Degree in IT/Cybersecurity

Tools

Archer

ProcessUnity

ServiceNow

OneTrust

Job description

Crowe-Global is seeking a Senior Third-Party Risk Manager to lead assessments of information security postures for key clients. You will guide teams across client sites and vendor engagements, identifying risks and remediation strategies, while mentoring junior staff.

The role requires strong leadership, critical thinking, and the ability to communicate effectively with client leadership and technical teams. A background in IT/cybersecurity and relevant certifications are preferred.