Third Party Risk Manager Job at Crowe | Cybersecurity Assessments
Overview
You will lead third-party risk assessments for key clients, evaluating the security posture of their vendors and service providers. You'll oversee multiple engagements, manage teams, and present findings to client leadership. This role requires deep expertise in CISSP, CISA, or CTPRA and experience with frameworks like SOC 2, ISO 27001, and NIST. You'll serve as a trusted advisor, mentor junior staff, and drive business development. What sets this apart is the chance to work across industries like Pharmaceutical, Financial Services, and Technology within a top consulting firm.
What You'll Do10
- 1Lead third-party risk assessments by evaluating questionnaire responses, performing control validation, and assessing documentation per established procedures and standards.
- 2Manage and oversee assessment teams, project timelines, and client deliverables across multiple engagements.
- 3Perform and oversee site visits to third-party facilities to validate security controls.
- 4Evaluate security controls for compliance with policies, laws, and regulations, including SOC 2, ISO 27001, NIST, HIPAA, PCI DSS, and HITRUST.
- 5Assess cloud technologies such as SaaS, PaaS, and IaaS deployments for security risks.
- 6Document findings, present remediation recommendations, and communicate results to client leadership.
- 7Conduct quality assurance reviews of team assessments to ensure consistency and accuracy.
- 8Deliver executive-level reports and presentations to clients.
- 9Coordinate schedules, resource allocation, and assessment activities for key clients, ensuring all deliverables are met.
- 10Support business development efforts, manage client relationships, and mentor staff and senior consultants.
Requirements10
- 1Bachelor's Degree in Information Technology or Cybersecurity, or related field.
- 25-8+ years of IT, cybersecurity, risk management, or third-party risk experience with network, platform, or application technology.
- 3One or more of: CISSP, CISA, CTPRA, or CRISC (preferred).
- 4Strong knowledge of security domains including auditing, policy, database security, firewall design, risk analysis, identity management, access management, cloud security, or web security.
- 5Working knowledge of compliance frameworks such as SOC 2, ISO 27001, NIST, HIPAA, PCI DSS, or HITRUST.
- 6Experience managing multiple projects and teams in a consulting environment.
- 7Demonstrated leadership in overseeing project execution, client relationships, and team performance.
- 8Ability to learn new technologies and systems through independent research.
- 9Strong verbal and written communication skills, with ability to present to technical and executive audiences.
- 10Ability to travel domestically 20-50% per year.
Salary Insight
$60 - $114k per year
Location
Required Skills
Similar open positions
Explore active roles that match your skills and interests.
Crowe LLP
VerifiedAudit Manager Financial Services Crowe LLP
Join Crowe LLP as an Audit Manager focusing on Financial Services. Lead client relationships drive results. Lead multiple teams and address client concerns. Promote innovative ideas and stay updated on industry trends. Seeking a licensed CPA with experience in Banking Private Equity Asset Management Insurance Fintech.
PricewaterhouseCoopers Advisory Services LLC
VerifiedCyber Strategy Manager, Compliance & Risk
You will lead cyber strategy and transformation engagements, guiding clients through complex regulatory landscapes and enhancing internal controls. In this role, you will own project delivery, from planning to execution, while mentoring junior staff and collaborating with senior stakeholders. You will implement frameworks like NIST CSF and ISO/IEC 27001 to strengthen data protection and compliance. This position offers exposure to high-impact client work across industries, with up to 60% travel and a focus on innovation and technology adoption.
Target
VerifiedSr Third Party Risk Consultant Due Diligence
You will own due diligence for prospective third parties, assigning risk tiers and advising Relationship Managers at Target's Minneapolis HQ. You'll join Legal Affairs' Third Party Risk Management team, collaborating with Risk Program Owners and leaders across a $100B+ retail enterprise. Unlike typical risk roles, you'll drive process improvements and lead automation efforts, with a hybrid work model and comprehensive benefits.
Crowe
VerifiedIAM Architect Manager Job at Crowe | Identity Access Mgmt
You will own IAM strategy, architecture, and roadmaps for enterprise clients across cloud, on-premises, and hybrid environments. You lead design and implementation of identity solutions using Entra ID, SailPoint, CyberArk, and other leading platforms. Partner with C-suite stakeholders to align identity security with business goals. This role blends strategic leadership with hands-on engineering. You will shape Crowe's IAM practice and support broader cybersecurity initiatives.
Baker Tilly Advisory Group, LP
VerifiedIT Audit & Cybersecurity Senior Consultant (SOC Focus)
Senior Consultant owns IT audit and cybersecurity risk assessments for SOC engagements at Baker Tilly, a top advisory firm serving 141 territories with 43,000 professionals. Lead client interactions to map technology risks to business objectives, implementing process and control improvements. Partner with cross-functional teams on internal audits and compliance, driving strategic assurance for diverse industries. This role stands out for its direct client exposure and upward career trajectory in a growing risk practice.
Crowe Advisory LLC
VerifiedServiceNow SecOps Implementation Manager at Crowe Advisory LLC
Join Crowe Advisory LLC as a ServiceNow SecOps Implementation Manager to lead security service delivery. You will support pre-sales activities and guide clients through ServiceNow implementations. This role offers flexibility and a focus on impactful technology-driven solutions.