Remote Third-Party Risk Senior Consultant

Crowe-Global; Indianapolis (IN); On-site; USD 78,000 - 154,000; Full time

Job summary

Crowe is seeking a Senior Third-Party Risk Consultant to evaluate information security across client ecosystems, including SaaS/PaaS/IaaS environments. You will lead assessments, coordinate teams, and deliver risk-based findings.

Ideal candidates have a cybersecurity background, 2–4 years IT experience, and willingness to travel domestically up to 50% annually. Remote work is open to qualified applicants across the United States.

Qualifications

• Bachelor's degree in IT, Cybersecurity or related field with 2–4 years IT experience across network, platform or application tech.
• Willingness to obtain CISSP, CISA or CTPRA certifications.
• Knowledge of auditing, policy, database security, firewall design/implementation, risk analysis, identity and access management, or web security.
• Working knowledge of SOC2, ISO 27001, NIST, HIPAA or similar compliance frameworks.
• Ability to manage multiple projects and learn new technologies independently.

Responsibilities

• Lead third-party information security assessments and coordinate delivery with Crowe teams and client stakeholders.
• Perform third-party risk assessments, site visits, and evaluate security controls for policy compliance.
• Document findings and remediation recommendations; deliver high-quality assessment reports.
• Coordinate assessment schedules for key clients and oversee all deliverables across teams.
• Interact with clients’ IS/Business unit leaders and vendor ecosystem to identify risks and gaps.

Skills

Communication skills

Cybersecurity fundamentals

Project management

Technical writing

Travel readiness

Education

Bachelor's Degree in IT/Cybersecurity

Tools

Archer

Process Unity

ServiceNow

GRC tools

Job description

Crowe is seeking a Senior Third-Party Risk Consultant to evaluate information security across client ecosystems, including SaaS/PaaS/IaaS environments. You will lead assessments, coordinate teams, and deliver risk-based findings.

Ideal candidates have a cybersecurity background, 2–4 years IT experience, and willingness to travel domestically up to 50% annually. Remote work is open to qualified applicants across the United States.