Financial Services Cybersecurity Senior Consultant

Support financial institutions with risk-based cybersecurity and technology risk advisory, focusing on governance, regulatory readiness, and cyber domain expertise.

• Lead and support second-line cybersecurity and technology risk assessments, program improvements, and transformation initiatives.
• Evaluate and enhance cybersecurity governance, including policies and standards.
• Review risk and control frameworks, risk appetite, metrics/KRIs, issue management, and executive and board reporting.
• Advise on regulatory expectations and industry frameworks for financial services, including:
  • FFIEC
  • GLBA
  • NYDFS Part 500
  • SEC cybersecurity requirements
  • NIST CSF
  • NIST 800-53
  • CIS Controls
• Apply cybersecurity risk expertise across IAM, data protection, cloud security, third-party risk, vulnerability management, incident response, and cyber resilience.
• Support cybersecurity regulatory readiness, examinations, remediation efforts, and responses to regulatory findings.
• Act as a trusted advisor and extension of client CISO, cybersecurity risk, technology risk, and enterprise risk teams to provide effective second-line oversight and challenge.
• Communicate cybersecurity risks, findings, and recommendations to technical teams, senior executives, and board-level stakeholders.
• Lead engagement workstreams, mentor junior team members, and contribute to the financial services cybersecurity practice and solution development.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, Risk Management, Finance, or a related field.
• 2+ years of experience in cybersecurity, technology risk, information security, regulatory advisory, or related consulting or industry roles.
• Experience working with or supporting financial services organizations or other highly regulated environments.
• Understanding of second-line risk management, including risk assessment, oversight and challenge, issue management, risk appetite, governance, and reporting.
• Knowledge of cybersecurity frameworks and financial services regulatory expectations.
• Strong skills in analysis, project management, written communication, and executive presentation.
• Ability to translate technical cybersecurity risks into clear business and risk implications.

Technologies / Frameworks

• FFIEC
• GLBA
• NYDFS Part 500
• SEC cybersecurity requirements
• NIST CSF
• NIST 800-53
• CIS Controls
• IAM

Benefits

• Comprehensive total rewards package
• Career Coach guidance (consistent basis)

Preferred Qualifications

• Experience in a second-line cybersecurity or technology risk function within banking, insurance, asset/wealth management, capital markets, fintech, or another financial services organization.
• Knowledge of FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, and other financial services regulatory expectations.
• Experience across cybersecurity domains such as IAM, cloud security, data protection, third-party risk, vulnerability management, cyber resilience, and incident response.
• Experience supporting regulatory examinations, cybersecurity program assessments, remediation programs, or risk transformation initiatives.
• Experience developing or enhancing cybersecurity risk appetite, KRIs, metrics, executive reporting, and board reporting.
• Certifications such as CISSP, CISM, CRISC, or similar credentials.
• Experience with emerging technology risks, including AI governance, AI risk management, and secure adoption of AI technologies.

Additional Information

• Learn more about what working at Crowe can mean for you.
• Talent is nurtured in an inclusive culture that values diversity.
• Consistent meetings with a Career Coach to guide career goals and aspirations.
• Learn more about where talent can prosper.

Location: San Jose, CA (hybrid)

Salary: USD 80,500 - 159,300 per yearly