Financial Services Cybersecurity Internal Audit Manager
![]() | |
![]() United States, Illinois, Chicago | |
![]() 225 West Wacker Drive (Show on map) | |
![]() | |
Your Journey at Crowe Starts Here: At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you're trusted to deliver results and make an impact. We embrace you for who you are, care for your well-being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That's why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services. Join us at Crowe and embark on a career where you can help shape the future of our industry. Job Description: IntroductionAt Crowe LLP, we bring deep industry specialization and functional expertise to help financial institutions stay ahead of evolving risks. We are seeking a Financial Services Cybersecurity Internal Audit Manager to join our growing team of professionals focused on delivering high-quality, technically rigorous internal audit services in the cybersecurity domain. As a Manager, you will work directly with client stakeholders to understand their cybersecurity internal audit needs, collaborate with internal audit team members to plan and execute engagements, and deliver high-quality findings and recommendations that enhance the client's security posture and compliance efforts. What You'll DoYou will play a critical role in independently delivering internal audits and advisory engagements across a variety of financial services clients. Your responsibilities will include: - Planning and executing internal audits across cybersecurity and IT infrastructure domains, including: - Security Operations Centers (SOC) - Data Services and Data Governance - Third Party Risk Management (TPRM) - Cyber Resilience and Incident Response - Infrastructure risk control frameworks, including second line of defense (2LOD) review - Infrastructure-level Incident and Problem Management - Integrated Cyber Auditing alongside business and operational auditors - Assessing design and operational effectiveness of technical cybersecurity controls against regulatory expectations and industry frameworks (e.g., NIST CSF, COBIT, ISO 27001). - Preparing thorough audit documentation, reports, and deliverables independently and on schedule. - Communicating audit procedures, findings, and recommendations directly to client stakeholders, including both technical and non-technical audiences. - Maintaining audit quality and responsiveness throughout the engagement lifecycle, ensuring client satisfaction and confidence. Required Qualifications- Minimum of 5 years of total professional experience, including: - At least 3 years of hands-on experience performing internal audits, specifically in cybersecurity, IT general controls, or infrastructure risk within a financial services or consulting environment. - Strong working knowledge of cybersecurity operations, controls, and governance practices. - Demonstrated ability to independently complete audits from planning through reporting, with minimal oversight. - Excellent written and verbal communication skills, especially in documenting observations and explaining results to clients. Preferred Qualifications- One or more relevant professional certifications: CISSP, CISA, or equivalent. - Experience working with or auditing to financial services regulations and guidelines (e.g., OCC, FDIC, FFIEC, NYDFS). - Prior experience at a public accounting or advisory firm delivering internal audit services to banking, insurance, or fintech clients. We expect the candidate to uphold Crowe's values of Care, Trust, Courage, and Stewardship. These values define who we are. We expect all of our people to act ethically and with integrity at all times. The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Crowe, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $109,400.00 - $218,100.00 per year.Our Benefits: How You Can Grow: Crowe LLP provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, sexual orientation, gender identity or expression, genetics, national origin, disability or protected veteran status, or any other characteristic protected by federal, state or local laws. Crowe will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws. Please visit our webpage to see notices of the various state and local Ban-the-Box laws and Fair Chance Ordinances, where applicable. |