Remote Third-Party Risk & Security Leader

Crowe-Global; New York (NY); On-site; USD 60,000 - 115,000; Full time

Job summary

Crowe is seeking a skilled Third Party Risk Manager to lead assessments of clients' information security postures, manage teams on multiple engagements, and deliver executive‑level findings. You will work with Crowe teams on-site or at client sites, guiding remediation and shaping risk posture while mentoring junior consultants and supporting business development.

The role emphasizes collaboration across technology, compliance, and client leadership, with travel to client sites and a focus on

Qualifications

• Bachelor’s Degree in IT and/or Cybersecurity.
• 5–8+ years IT, cybersecurity, risk management, or third-party risk experience.
• CISSP, CISA, CTPRA or CRISC certifications preferred.
• Knowledge of SOC 2, ISO 27001, NIST, HIPAA, PCI DSS, HITRUST and cloud security.
• Strong leadership and communication, ability to manage multiple projects.

Responsibilities

• Lead third-party risk assessments via questionnaires and control validation.
• Oversee assessment teams, timelines and client deliverables.
• Conduct site visits to third-party facilities and evidence collection.
• Evaluate security controls for policy and regulatory compliance.
• Present remediation findings to client leadership.
• Mentor junior staff and support business development.

Skills

Cybersecurity

Risk management

IT experience

Third-party risk

Project leadership

Education

Bachelor's Degree in IT/Cybersecurity

CISSP

CISA

CTPRA

CRISC

Tools

Archer

ProcessUnity

ServiceNow

OneTrust

Job description

Crowe is seeking a skilled Third Party Risk Manager to lead assessments of clients' information security postures, manage teams on multiple engagements, and deliver executive‑level findings. You will work with Crowe teams on-site or at client sites, guiding remediation and shaping risk posture while mentoring junior consultants and supporting business development.

The role emphasizes collaboration across technology, compliance, and client leadership, with travel to client sites and a focus on