Senior Cybersecurity Audit Consultant - Risk & IAM

Crowe; Sacramento (CA); On-site; USD 81,000 - 159,000; Full time

Job summary

Crowe is seeking a Cybersecurity Senior Consultant in the United States to help organizations navigate evolving threats and regulatory environments by delivering practical cybersecurity solutions. You will assess posture, design programs, evaluate IT controls, and implement strategies including responsible AI integration across client engagements.

The role emphasizes growth mindset, strong communication, and the ability to translate complex security concepts for executive audiences, with

Qualifications

• Bachelor's degree in information systems, Computer Science, Cybersecurity, Engineering, or related field.
• 2+ years of experience in cybersecurity, IT audit, risk advisory, or related consulting or industry roles.
• Working knowledge of operating systems (Windows, Linux/Unix) and databases (SQL, Oracle, etc.).
• Familiarity with regulatory compliance and cybersecurity frameworks.

Responsibilities

• Lead or support cybersecurity risk assessments, IT internal audits, and regulatory readiness efforts (e.g., HIPAA, GDPR, CMMC, etc).
• Evaluate and test IT controls, application controls, security configurations, and interface/integration security.
• Provide guidance on security architecture, IAM, data protection, and cloud security across Azure, AWS, or GCP.
• Assess and advise on emerging technologies including AI/ML use in business processes, with a focus on responsible and secure implementation.
• Conduct assessments focused on business resiliency and incident response readiness and/or enable organization to enhance or mature their business resiliency.
• Support clients in aligning their cybersecurity programs with leading frameworks (NIST CSF, NIST 800.53, CIS, integrated control frameworks, etc.).
• Present findings and recommendations to stakeholders, including C-suite and board-level leadership, through clear, concise written and verbal communication.
• Act as a strategic advisor to client security and risk functions, helping to build, enhance, and operationalize cybersecurity programs across domains such as governance, risk, and compliance (GRC) and business resiliency.
• Serve as an extension of client teams to lead or support program execution activities, including control implementation, metrics/reporting, issue remediation, and continuous improvement initiatives.
• Mentor and supervise junior consultants; contribute to team development and internal knowledge-sharing.
• Participate in practice development, including service innovation and thought leadership.

Skills

Cybersecurity

IT audit

Risk advisory

Regulatory compliance

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

Azure

AWS

GCP

Job description

Crowe is seeking a Cybersecurity Senior Consultant in the United States to help organizations navigate evolving threats and regulatory environments by delivering practical cybersecurity solutions. You will assess posture, design programs, evaluate IT controls, and implement strategies including responsible AI integration across client engagements.

The role emphasizes growth mindset, strong communication, and the ability to translate complex security concepts for executive audiences, with