Strategic Third-Party Risk Manager

Crowe; United States; Remote; USD 60,000 - 115,000; Full time

Job summary

Crowe is seeking a Manager – Third Party Risk to lead the assessment of information security programs for key clients. You will manage teams, oversee deliverables, and act as a trusted advisor to client leadership across vendor ecosystems.

The role requires 5–8+ years in IT/cybersecurity risk, relevant certifications, and the ability to travel up to 50%. You will evaluate controls, conduct site visits, and deliver executive‑level reports while mentoring junior staff.

Qualifications

• Bachelor’s degree in IT/cybersecurity or related field
• 5–8+ years of IT, cybersecurity, risk management, or third‑party risk experience
• Certifications: CISSP, CISA, CTPRA; CRISC preferred
• Strong knowledge of auditing, policy, cloud/security
• Experience with SOC 2, ISO 27001, NIST, HIPAA, PCI DSS, or HITRUST
• Experience leading projects and teams in a fast‑paced consulting environment
• Excellent verbal and written communication; able to present to executives
• Willingness to travel 20%–50% domestically

Responsibilities

• Lead Third Party Risk Assessments evaluating questionnaires and controls
• Oversee assessment teams, timelines, and client deliverables
• Perform site visits to third‑party facilities
• Assess security controls for compliance with policies and standards
• Evaluate SaaS, PaaS, and IaaS deployments
• Document findings and present remediation recommendations to client leadership
• Deliver executive‑level reports and presentations
• Coordinate schedules and resources for key third‑party clients
• Support business development and client relationship management
• Mentor and develop staff and senior consultants

Skills

Cybersecurity knowledge

Risk management

Project management

Leadership

Communication skills

Travel readiness

Education

Bachelor’s Degree

Advanced degree in Cybersecurity (preferred)

Tools

Archer

ProcessUnity

ServiceNow

OneTrust

GRC/VRM platforms

Job description

Crowe is seeking a Manager – Third Party Risk to lead the assessment of information security programs for key clients. You will manage teams, oversee deliverables, and act as a trusted advisor to client leadership across vendor ecosystems.

The role requires 5–8+ years in IT/cybersecurity risk, relevant certifications, and the ability to travel up to 50%. You will evaluate controls, conduct site visits, and deliver executive‑level reports while mentoring junior staff.