Senior Cybersecurity Consultant, Financial Services

• Lead and support second-line cybersecurity and technology risk assessments, program enhancements, and transformation initiatives
• Assess cybersecurity governance, policies and standards, risk and control frameworks, risk appetite, metrics/KRIs, issue management, and executive and board reporting
• Advise clients on financial services regulatory expectations and industry frameworks, including FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, NIST CSF, NIST 800-53, and CIS Controls
• Provide cybersecurity risk expertise across IAM, data protection, cloud security, third-party risk, vulnerability management, incident response, and cyber resilience
• Support cybersecurity regulatory readiness, examinations, remediation efforts, and responses to regulatory findings
• Serve as a trusted advisor and extension of client CISO, cybersecurity risk, technology risk, and enterprise risk teams
• Communicate cybersecurity risks, findings, and recommendations to technical teams, senior executives, and board-level stakeholders
• Lead engagement work streams and mentor junior team members
• Contribute to financial services cybersecurity practice and solution development
• Continuously learn, collaborate across teams, and use technology and emerging AI capabilities to improve efficiency, insights, and client outcomes
• Develop client relationships, contribute to account strategy, support delivery excellence, and build trusted partnerships

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, Risk Management, Finance, or a related field
• 2+ years of experience in cybersecurity, technology risk, information security, regulatory advisory, or related consulting or industry roles
• Experience working with or supporting financial services organizations or other highly regulated environments
• Understanding of second-line risk management, including risk assessment, oversight and challenge, issue management, risk appetite, governance, and reporting
• Knowledge of cybersecurity frameworks and financial services regulatory expectations
• Strong analytical, project management, written communication, and executive presentation skills
• Ability to translate technical cybersecurity risks into clear business and risk implications
• Experience in a second-line cybersecurity or technology risk function within banking, insurance, asset/wealth management, capital markets, fintech, or another financial services organization
• Knowledge of FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, and other financial services regulatory expectations
• Experience with IAM, cloud security, data protection, third-party risk, vulnerability management, cyber resilience, and incident response
• Experience supporting regulatory examinations, cybersecurity program assessments, remediation programs, or risk transformation initiatives
• Experience developing or enhancing cybersecurity risk appetite, KRIs, metrics, executive reporting, and board reporting
• Certifications such as CISSP, CISM, CRISC, or similar credentials
• Experience with emerging technology risks, including AI governance, AI risk management, and secure adoption of AI technologies
• Must verify identity and eligibility to work in the United States
• Crowe is not sponsoring work authorization at this time
• Expected to act ethically and with integrity

Demonstrates expertise in cybersecurity risk management, regulatory compliance, and technology risk assessments within financial services. Proficient in translating technical risks into business implications while leading teams and enhancing cybersecurity frameworks.

• Cybersecurity Risk Management
• Regulatory Compliance
• Risk Assessment
• IAM
• CISSP

• Cybersecurity Governance
• Risk Control Frameworks
• Incident Response
• Cloud Security
• Data Protection
• Vulnerability Management
• Cyber Resilience
• Executive Reporting
• Metrics/KRIs
• Risk Appetite

• Analytical Skills
• Project Management
• Written Communication
• Executive Presentation
• Mentoring

• CISSP
• CISM
• CRISC

• FFIEC
• GLBA
• NYDFS Part 500
• SEC Cybersecurity Requirements
• NIST CSF
• NIST 800-53
• CIS Controls
• Financial Services
• Regulatory Advisory
• Second-Line Risk Management