Senior Third-Party Risk Lead (Hybrid/Remote)

Crowe; Charlotte (NC); On-site; USD 59,800 - 114,500; Full time

Benefits offered by this job

Remote work arrangements

Job summary

Crowe seeks a Manager – Third Party Risk to lead assessments of clients' information security posture, oversee delivery, and mentor junior staff. You’ll work across client sites or Crowe teams and liaise with information security leadership and vendors.

This role covers risk evaluation of SaaS/PaaS/IaaS, reporting to executives, coordinating schedules, and supporting growth initiatives in a dynamic consulting environment.

Qualifications

• Bachelor’s Degree in IT/Cybersecurity or related field required.
• 5–8+ years IT, cybersecurity, risk management, or third-party risk experience.
• Certifications: CISSP, CISA, CTPRA; CRISC preferred.
• Experience with SOC 2, ISO 27001, NIST, HIPAA, PCI DSS, HITRUST advantageous.
• Experience leading teams in a fast-paced consulting environment.
• Strong communication skills for executive audiences.

Responsibilities

• Lead Third Party Risk Assessments by evaluating questionnaires and controls.
• Manage assessment teams, timelines, and client deliverables across engagements.
• Perform and oversee site visits to third-party facilities.
• Evaluate security controls for regulatory compliance and risk.
• Assess cloud deployments (SaaS, PaaS, IaaS) and governance.
• Document findings and present remediation recommendations to leadership.
• Conduct QA reviews for consistency and quality of assessments.
• Deliver high-quality executive-level reports and presentations.
• Coordinate schedules, resources, and activities for key clients.
• Support business development and practice growth; mentor staff.

Skills

Project management

Leadership

Risk assessment

Information security

Third-party risk

Cloud security

Regulatory compliance

Vendor management

Communication

Education

Bachelor’s Degree

Advanced degree (preferred)

Tools

Archer

ProcessUnity

ServiceNow

OneTrust

Job description

Crowe seeks a Manager – Third Party Risk to lead assessments of clients' information security posture, oversee delivery, and mentor junior staff. You’ll work across client sites or Crowe teams and liaise with information security leadership and vendors.

This role covers risk evaluation of SaaS/PaaS/IaaS, reporting to executives, coordinating schedules, and supporting growth initiatives in a dynamic consulting environment.