FinanceJobs.io
← Back to all jobs
Crowe

Financial Services Cybersecurity Senior Consultant

Crowe
San Jose, CA $81k - $159k/yr Full time Posted 1h ago
Senior Cloud Platforms Cyber Risk Assessment Data Security Financial Regulatory Compliance Financial Services Cybersecurity Identity and Access Management Incident Response Information Security InfoSec Risk Governance Risk Management Security Compliance Security Standards
Apply Now

Job Description

Crowe is seeking a Financial Services Cybersecurity Senior Consultant to advise financial institutions as cyber threats and regulatory expectations evolve. In this hybrid role based in San Jose, CA, you will help clients strengthen cybersecurity governance and technology risk management through risk-based second-line oversight and practical advisory.

This position focuses on assessing current capabilities, driving improvements across cybersecurity programs, and supporting regulatory readiness. You will bring expertise across core security domains and clearly communicate findings and recommendations to technical teams, senior executives, and board-level stakeholders.

What you’ll do

  • Lead and support second-line cybersecurity and technology risk assessments, program enhancements, and transformation initiatives.
  • Evaluate cybersecurity governance, policies and standards, risk and control frameworks, risk appetite, metrics and KRIs, issue management, and executive and board reporting.
  • Advise on financial services regulatory expectations and industry frameworks, including FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, NIST CSF, NIST 800-53, and CIS Controls.
  • Apply cybersecurity risk expertise across IAM, data protection, cloud security, third-party risk, vulnerability management, incident response, and cyber resilience.
  • Support cybersecurity regulatory readiness, examinations, remediation efforts, and responses to regulatory findings.
  • Act as a trusted advisor and extension of client CISO, cybersecurity risk, technology risk, and enterprise risk teams to provide effective second-line oversight and challenge.
  • Communicate cybersecurity risks, findings, and recommendations clearly to technical teams, senior executives, and board-level stakeholders.
  • Own engagement workstreams, mentor junior team members, and contribute to the financial services cybersecurity practice and solution development.

What you’ll need

  • Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, Risk Management, Finance, or a related field.
  • 2+ years of experience in cybersecurity, technology risk, information security, regulatory advisory, or related consulting or industry roles.
  • Experience working with or supporting financial services organizations or other highly regulated environments.
  • Understanding of second-line risk management, including risk assessment, oversight and challenge, issue management, risk appetite, governance, and reporting.
  • Knowledge of cybersecurity frameworks and financial services regulatory expectations.
  • Strong analytical, project management, written communication, and executive presentation skills.
  • Ability to translate technical cybersecurity risks into clear business and risk implications.

Relevant frameworks and technologies

  • FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements
  • NIST CSF, NIST 800-53, CIS Controls
  • IAM

Salary range

USD 80,500 - 159,300 per year.

Benefits

  • Comprehensive total rewards package
  • Career Coach guidance on a consistent basis

Preferred qualifications

  • Experience in a second-line cybersecurity or technology risk function within banking, insurance, asset/wealth management, capital markets, fintech, or another financial services organization.
  • Knowledge of FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, and other financial services regulatory expectations.
  • Experience across cybersecurity domains such as IAM, cloud security, data protection, third-party risk, vulnerability management, cyber resilience, and incident response.
  • Experience supporting regulatory examinations, cybersecurity program assessments, remediation programs, or risk transformation initiatives.
  • Experience developing or enhancing cybersecurity risk appetite, KRIs, metrics, executive reporting, and board reporting.
  • Certifications such as CISSP, CISM, CRISC, or similar.
  • Experience with emerging technology risks, including AI governance, AI risk management, and secure adoption of AI technologies.

Crowe also provides additional learning and growth support through its inclusive culture, and ongoing guidance through a consistent Career Coach.

Similar Jobs