Financial Services Cybersecurity Internal Audit Manager

Financial Services Cybersecurity Internal Audit Manager

At Crowe LLP, we combine deep industry specialization with functional expertise to help financial institutions stay ahead of evolving risks. We are seeking a Financial Services Cybersecurity Internal Audit Manager to join our growing team of professionals focused on delivering high‑quality, technically rigorous internal audit services in the cybersecurity domain.

As a Manager, you will work directly with client stakeholders to understand their cybersecurity internal audit needs, collaborate with internal audit team members to plan and execute engagements, and deliver high‑quality findings and recommendations that enhance clients’ security posture and compliance efforts.

You will play a critical role in independently delivering internal audits and advisory engagements across a variety of financial services clients. Your responsibilities include:

• Planning and executing internal audits across cybersecurity and IT infrastructure domains
• Security Operations Centers (SOC)
• Data Services and Data Governance
• Third Party Risk Management (TPRM)
• Cyber Resilience and Incident Response
• Infrastructure risk control frameworks, including second line of defense (2
  
  LOD) review
• Infrastructure‑level Incident and Problem Management
• Integrated Cyber Auditing alongside business and operational auditors
• Assessing design and operational effectiveness of technical cybersecurity controls against regulatory expectations and industry frameworks (e.g., NIST CSF, COBIT, ISO 27001)
• Preparing thorough audit documentation, reports, and deliverables independently and on schedule
• Communicating audit procedures, findings, and recommendations directly to client stakeholders, including both technical and non‑technical audiences
• Maintaining audit quality and responsiveness throughout the engagement lifecycle, ensuring client satisfaction and confidence

• Minimum of 5 years of total professional experience, including:
• Minimum of 3 years of hands‑on experience performing internal audits, specifically in cybersecurity, IT general controls, or infrastructure risk within a financial services or consulting environment
• Strong working knowledge of cybersecurity operations, controls, and governance practices
• Demonstrated ability to independently complete audits from planning through reporting, with minimal oversight
• Excellent written and verbal communication skills, especially in documenting observations and explaining results to clients
• Bachelor’s degree required
• One or more relevant professional certifications: CISSP, CISA, or equivalent

• Experience working with or auditing financial services regulations and guidelines (e.g., OCC, FDIC, FFIEC, NYDFS)
• Prior experience at a public accounting or advisory firm delivering internal audit services to banking, insurance, or fintech clients

The disclosed range estimate for this role is $ – $ per year. This range is influenced by factors such as skill set, experience, licenses and certifications, and business needs.

At Crowe, we care about our people and offer a comprehensive total rewards package. As a member of a leading professional services firm, you will have access to benefits that support your health, wealth, and life goals.

We nurture talent in an inclusive culture that values diversity. You will have the opportunity to work closely with a Career Coach who will guide you in setting and pursuing your career goals and aspirations.

Crowe LLP provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, sexual orientation, gender identity or expression, genetics, national origin, disability or protected veteran status, or any other characteristic protected by federal, state or local laws. Crowe LLP does not accept unsolicited candidates, referrals or resumes from any staffing agency, recruiting service, sourcing entity or any other third‑party paid service at any time.

We consider all qualified applicants, including those with criminal histories, in a manner consistent with applicable state and local laws.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and will complete the required employment eligibility verification form upon hire. Crowe is not sponsoring for work authorization at this time.