Senior Cybersecurity Consultant, Financial Services

Jobtailor; California (MO); On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor is seeking a cybersecurity risk consultant to lead and support risk assessments for financial services clients in the United States. You will shape governance, risk frameworks, and executive reporting while acting as a trusted advisor to client CISO and risk teams.

The role requires translating complex cyber risk into business implications, mentoring junior staff, and contributing to the practice with emerging technologies and AI-driven insights.

Qualifications

• Bachelor's degree or higher in a related field.
• 2+ years in cybersecurity, technology risk, or regulatory advisory roles.
• Experience with financial services or regulated environments is preferred.
• Strong ability to translate technical risk to business impact.
• Familiarity with FFIEC, GLBA, NYDFS Part 500, and SEC cybersecurity requirements.

Responsibilities

• Lead and support cybersecurity risk assessments, and drive program enhancements.
• Advise on governance, risk frameworks, metrics, and board reporting.
• Collaborate with clients on regulatory expectations and industry standards.
• Provide risk expertise across IAM, data protection, cloud security, and third‑party risk.
• Mentor junior staff and contribute to practice development.

Skills

Cybersecurity risk management

Regulatory compliance

Risk assessment

IAM

CISSP

Education

Bachelor's degree in Cybersecurity/Information Security

2+ years in cybersecurity/regulatory advisory

Tools

NIST CSF

FFIEC frameworks

Job description

• Lead and support second-line cybersecurity and technology risk assessments, program enhancements, and transformation initiatives
• Assess cybersecurity governance, policies and standards, risk and control frameworks, risk appetite, metrics/KRIs, issue management, and executive and board reporting
• Advise clients on financial services regulatory expectations and industry frameworks, including FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, NIST CSF, NIST 800-53, and CIS Controls
• Provide cybersecurity risk expertise across IAM, data protection, cloud security, third-party risk, vulnerability management, incident response, and cyber resilience
• Support cybersecurity regulatory readiness, examinations, remediation efforts, and responses to regulatory findings
• Serve as a trusted advisor and extension of client CISO, cybersecurity risk, technology risk, and enterprise risk teams
• Communicate cybersecurity risks, findings, and recommendations to technical teams, senior executives, and board-level stakeholders
• Lead engagement workstreams and mentor junior team members
• Contribute to financial services cybersecurity practice and solution development
• Continuously learn, collaborate across teams, and use technology and emerging AI capabilities to improve efficiency, insights, and client outcomes
• Develop client relationships, contribute to account strategy, support delivery excellence, and build trusted partnerships

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, Risk Management, Finance, or a related field
• 2+ years of experience in cybersecurity, technology risk, information security, regulatory advisory, or related consulting or industry roles
• Experience working with or supporting financial services organizations or other highly regulated environments
• Understanding of second-line risk management, including risk assessment, oversight and challenge, issue management, risk appetite, governance, and reporting
• Knowledge of cybersecurity frameworks and financial services regulatory expectations
• Strong analytical, project management, written communication, and executive presentation skills
• Ability to translate technical cybersecurity risks into clear business and risk implications
• Experience in a second-line cybersecurity or technology risk function within banking, insurance, asset/wealth management, capital markets, fintech, or another financial services organization
• Knowledge of FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, and other financial services regulatory expectations
• Experience with IAM, cloud security, data protection, third-party risk, vulnerability management, cyber resilience, and incident response
• Experience supporting regulatory examinations, cybersecurity program assessments, remediation programs, or risk transformation initiatives
• Experience developing or enhancing cybersecurity risk appetite, KRIs, metrics, executive reporting, and board reporting
• Certifications such as CISSP, CISM, CRISC, or similar credentials
• Experience with emerging technology risks, including AI governance, AI risk management, and secure adoption of AI technologies
• Must verify identity and eligibility to work in the United States
• Crowe is not sponsoring work authorization at this time
• Expected to act ethically and with integrity

Core Competencies

Demonstrates expertise in cybersecurity risk management, regulatory compliance, and technology risk assessments within financial services. Proficient in translating technical risks into business implications while leading teams and enhancing cybersecurity frameworks.

Highest-signal resume keywords

• Cybersecurity Risk Management
• Regulatory Compliance
• Risk Assessment
• IAM
• CISSP

Hard Skills

• Cybersecurity Governance
• Risk Control Frameworks
• Incident Response
• Cloud Security
• Data Protection
• Vulnerability Management
• Cyber Resilience
• Executive Reporting
• Metrics/KRIs
• Risk Appetite

Soft Skills

• Analytical Skills
• Project Management
• Written Communication
• Executive Presentation
• Mentoring

Certifications & Qualifications

• CISSP
• CISM
• CRISC

Industry Keywords

• FFIEC
• GLBA
• NYDFS Part 500
• SEC Cybersecurity Requirements
• NIST CSF
• NIST 800-53
• CIS Controls
• Financial Services
• Regulatory Advisory
• Second-Line Risk Management