Financial Services Cybersecurity Internal Audit Manager

Crowe is seeking a Financial Services Cybersecurity Internal Audit Manager to lead internal audits and advisory engagements focused on cyber risk for financial services clients. This onsite role is based in Dallas, TX, offering a salary range of USD 104,500 to 213,800 per year and requires a bachelor’s degree along with at least five years of professional experience. The successful candidate will deliver findings and practical recommendations to strengthen security controls and regulatory compliance across engagements.

Responsibilities

• Plan and execute internal audits across cybersecurity and IT infrastructure domains, including Security Operations Centers (SOC), Data Services and Data Governance, Third Party Risk Management (TPRM), Cyber Resilience and Incident Response, and infrastructure risk control frameworks such as second line of defense (2LOD) reviews.
• Assess infrastructure-level risk management, incident and problem management, and perform integrated cyber auditing alongside business and operational auditors.
• Evaluate the design and operating effectiveness of technical cybersecurity controls against regulatory expectations and industry frameworks (NIST CSF, COBIT, ISO 27001).
• Prepare thorough audit documentation, reports, and deliverables independently and on schedule.
• Communicate audit procedures, findings, and recommendations directly to client stakeholders, adapting messaging for technical and non-technical audiences.
• Maintain audit quality and responsiveness throughout the engagement lifecycle to ensure client satisfaction and confidence.

Requirements

• Minimum of 5 years of total professional experience, including at least 3 years performing internal audits in cybersecurity, IT general controls, or infrastructure risk within a financial services or consulting environment.
• Strong working knowledge of cybersecurity operations, controls, and governance practices.
• Demonstrated ability to independently complete audits from planning through reporting with minimal oversight.
• Excellent written and verbal communication skills, especially in documenting observations and explaining results to clients.
• Bachelor's degree required; professional certifications such as CISSP, CISA, or equivalent are preferred.

Technologies

• NIST CSF
• COBIT
• ISO 27001