Financial Services Cybersecurity Internal Audit Manager

Benefits and culture

Your experience at Crowe starts with a strong people-first approach. Crowe emphasizes that great people drive a great firm, and they offer a comprehensive total rewards package designed to support both professional growth and personal well being.

• Location: Charlotte, NC on site
• Salary: USD 104,500 to 213,800 per year
• Education and experience: Bachelor's degree required; minimum 5 years of total professional experience

Grow with Crowe

We cultivate talent within an inclusive culture that values diversity. You will have regular engagement with a Career Coach to guide your goals and advancement, helping you progress along your chosen path.

About Crowe

Crowe LLP brings deep industry specialization and functional expertise to help financial institutions manage evolving risks. We are seeking a Financial Services Cybersecurity Internal Audit Manager to join our growing team delivering high quality, technically rigorous internal audit services in the cybersecurity domain. Crowe is a large public accounting, consulting and technology firm that serves clients worldwide as an independent member of Crowe Global and is recognized as a strong place to work.

Responsibilities

• Plan and conduct internal audits across cybersecurity and IT infrastructure domains, including Security Operations Centers (SOC)
• Plan and conduct internal audits across cybersecurity and IT infrastructure domains, including Data Services and Data Governance
• Plan and conduct internal audits across cybersecurity and IT infrastructure domains, including Third Party Risk Management (TPRM)
• Plan and conduct internal audits across cybersecurity and IT infrastructure domains, including Cyber Resilience and Incident Response
• Plan and conduct internal audits across cybersecurity and IT infrastructure domains, including Infrastructure risk control frameworks and 2LOD reviews
• Plan and conduct internal audits across cybersecurity and IT infrastructure domains, including Infrastructure-level Incident and Problem Management
• Plan and conduct Integrated Cyber Auditing alongside business and operational auditors
• Assess design and operational effectiveness of technical cybersecurity controls against regulatory expectations and industry frameworks (NIST CSF, COBIT, ISO 27001)
• Prepare thorough audit documentation, reports, and deliverables independently and on schedule
• Communicate audit procedures, findings, and recommendations to client stakeholders, addressing both technical and non-technical audiences
• Maintain audit quality and responsiveness throughout the engagement lifecycle to ensure client satisfaction

Requirements

• Minimum of 5 years of total professional experience
• Minimum of 3 years of hands-on internal audit experience in cybersecurity, IT general controls, or infrastructure risk within financial services or a consulting environment
• Strong working knowledge of cybersecurity operations, controls, and governance practices
• Ability to independently complete audits from planning through reporting with minimal supervision
• Excellent written and verbal communication skills for documenting observations and explaining results to clients
• Bachelor's degree required
• One or more relevant professional certifications: CISSP, CISA, or equivalent

Technologies

• NIST CSF
• COBIT
• ISO 27001