Senior Third-Party Risk & InfoSec Consultant

Crowe; United States; Remote; USD 81,000 - 159,000; Full time

Job summary

Crowe seeks a Third Party Senior Staff to assess the information security posture of key clients’ third parties and manage the end-to-end delivery of assessments. You will interact with client IS and business leadership, vendors, and partners to identify risks and gaps, delivering thorough reports and remediation recommendations.

You will conduct site visits, evaluate controls for policy and regulatory compliance, and coordinate assessments across multiple projects while traveling domestically

Qualifications

• Bachelor’s Degree in IT and/or Cybersecurity background and/or experience, including 2-4 years IT experience
• Willingness to obtain CISSP, CISA, or CTPRA designations
• Knowledge of security areas such as auditing, policy, database security, firewall design and implementation, risk analysis, identity management, access management, or web
• Working knowledge of at least one compliance framework, such as SOC2, ISO 27001, NIST, HIPAA
• Experience managing multiple projects in a fast-paced environment
• Ability to learn new technologies independently
• Ability to communicate technical information verbally and in writing
• Ability to manage project schedules and client expectations
• Ability to travel domestically an average of 20%-50% per year

Responsibilities

• Assess the information security posture of key clients’ third parties and coordinate the execution of assessments
• Lead interactions with client IS and Business Unit leadership and with vendors and partners
• Conduct Third Party Risk Assessments and validate controls per procedures
• Perform site visits to third-party facilities
• Evaluate security controls for compliance with policies, laws, and regulations
• Assess cloud services (SaaS, PaaS, IaaS)
• Document findings and remediation recommendations
• Quality assure assessments and deliver high-quality reports
• Coordinate schedules and deliverables for key third-party clients

Skills

Cybersecurity knowledge

IT experience

Communication

Project management

Travel readiness

Education

Bachelor’s Degree

Tools

Archer

ProcessUnity

ServiceNow

Job description

Crowe seeks a Third Party Senior Staff to assess the information security posture of key clients’ third parties and manage the end-to-end delivery of assessments. You will interact with client IS and business leadership, vendors, and partners to identify risks and gaps, delivering thorough reports and remediation recommendations.

You will conduct site visits, evaluate controls for policy and regulatory compliance, and coordinate assessments across multiple projects while traveling domestically