Remote Third-Party Risk Manager

Crowe Advisory LLC; New York (NY); On-site; USD 60,000 - 115,000; Full time

Job summary

Crowe Advisory LLC is seeking a Senior Third Party Risk Manager to lead assessments of information security posture for key clients’ third parties. You will oversee teams, drive remediation strategies, and collaborate with client leadership across industries including Pharmaceuticals, Life Sciences, and Financial Services.

The role requires 5–8+ years in IT/cybersecurity risk, strong communication, and the ability to travel up to 50%.

Qualifications

• Bachelor’s degree in IT/cybersecurity with 5–8+ years of risk experience across network, platform, or application tech.
• Certifications: CISSP, CISA, CTPRA, or CRISC preferred.
• Strong knowledge of auditing, policy, and cloud/web security.
• Working knowledge of SOC 2, ISO 27001, NIST, HIPAA, PCI DSS, or HITRUST.
• Experience leading multiple projects and teams in a fast-paced consulting env.
• Proven leadership in project execution and client relationships.
• Ability to learn new tech via self-study.
• Strong communication for technical/executive audiences.
• Experience managing schedules, budgets, staffing, and client expectations.
• Willingness to travel 20–50% domestically.

Responsibilities

• Lead Third Party Risk Assessments evaluating questionnaires and controls.
• Oversee assessment teams, timelines, and client deliverables.
• Perform site visits to third-party facilities.
• Evaluate security controls for compliance with policies and standards.
• Assess cloud technologies (SaaS, PaaS, IaaS).
• Document risk findings and present remediation recommendations.
• QA reviews of assessments to ensure quality.
• Deliver executive-level reports and presentations.
• Coordinate schedules, resources, and activities.
• Support business development and client management.
• Mentor staff and senior consultants.

Skills

IT risk management

Cybersecurity

Leadership

Communication

Project management

Cloud security

Education

Bachelor's Degree in IT/Cybersecurity

Tools

Archer

ProcessUnity

ServiceNow

OneTrust

Job description

Crowe Advisory LLC is seeking a Senior Third Party Risk Manager to lead assessments of information security posture for key clients’ third parties. You will oversee teams, drive remediation strategies, and collaborate with client leadership across industries including Pharmaceuticals, Life Sciences, and Financial Services.

The role requires 5–8+ years in IT/cybersecurity risk, strong communication, and the ability to travel up to 50%.