Apply on Employer Site

Crowe · 8 hours ago

Financial Services Cybersecurity Internal Audit Manager

Grand Rapids, MI

Full-time

Hybrid

Senior Level

$109K/yr - $218K/yr

5+ years exp

Crowe is a leading public accounting, consulting, and technology firm that provides audit services to various entities. They are seeking a Financial Services Cybersecurity Internal Audit Manager to deliver high-quality internal audit services in the cybersecurity domain for financial institutions.

AccountingAdviceConsultingFinanceFinancial ServicesInformation TechnologyProfessional ServicesTax Consulting

No H1B

Responsibilities

Planning and executing internal audits across cybersecurity and IT infrastructure domains, including:

Security Operations Centers (SOC)

Data Services and Data Governance

Third Party Risk Management (TPRM)

Cyber Resilience and Incident Response

Infrastructure risk control frameworks, including second line of defense (2LOD) review

Infrastructure-level Incident and Problem Management

Integrated Cyber Auditing alongside business and operational auditors

Assessing design and operational effectiveness of technical cybersecurity controls against regulatory expectations and industry frameworks (e.g., NIST CSF, COBIT, ISO 27001)

Preparing thorough audit documentation, reports, and deliverables independently and on schedule

Communicating audit procedures, findings, and recommendations directly to client stakeholders, including both technical and non-technical audiences

Maintaining audit quality and responsiveness throughout the engagement lifecycle, ensuring client satisfaction and confidence

Qualification

Cybersecurity internal auditsCybersecurity operations knowledgeProfessional certifications CISSPProfessional certifications CISAFinancial services regulationsCommunication skills

Required

Minimum of 5 years of total professional experience, including:

At least 3 years of hands-on experience performing internal audits, specifically in cybersecurity, IT general controls, or infrastructure risk within a financial services or consulting environment

Strong working knowledge of cybersecurity operations, controls, and governance practices

Demonstrated ability to independently complete audits from planning through reporting, with minimal oversight

Excellent written and verbal communication skills, especially in documenting observations and explaining results to clients