Third-Party Risk

Third-Party Risk Finance Jobs

3 jobs found

2mo ago

Financial Services Cybersecurity Internal Audit Manager

Crowe Chicago, IL

Chicago, IL

2mo ago Closed

$105k - $214k/yr Full time Manager Cyber Resilience Cybersecurity Tools

This position is no longer accepting applications (closed Jul 14, 2026).

Job Description

At Crowe LLP, the emphasis is on bringing deep industry insight to help financial institutions navigate evolving cybersecurity risks. We are seeking a Senior-level Internal Audit Manager focused on financial services cybersecurity to deliver independent audits and advisory work that strengthen client security postures and regulatory compliance.

Introduction

Crowe applies specialized industry knowledge and practical expertise to support financial institutions in meeting current and emerging risk challenges. This role centers on leading cybersecurity internal audits and advisory engagements within Crowe’s growing team dedicated to high-quality, technically rigorous assurance services for the financial services sector.

What you'll do

Plan and execute internal audits across cybersecurity and IT infrastructure domains, including Security Operations Centers (SOC)
Evaluate Data Services and Data Governance programs
Oversee Third Party Risk Management (TPRM) activities
Strengthen cyber resilience and coordinate incident response readiness
Review infrastructure risk control frameworks, including 2LOD considerations
Lead infrastructure-level Incident and Problem Management reviews
Deliver integrated Cyber Auditing alongside business and operational audit teams
Assess design and operating effectiveness of technical cybersecurity controls against regulatory expectations and frameworks such as NIST CSF, COBIT, and ISO 27001
Prepare thorough audit documentation, reports, and deliverables independently and on schedule
Communicate audit procedures, findings, and recommendations directly to client stakeholders, tailored for both technical and non-technical audiences
Maintain audit quality and responsiveness throughout the engagement lifecycle to foster client satisfaction and confidence

Requirements

Minimum of 5 years of total professional experience
Minimum of 3 years of hands-on internal auditing, specifically in cybersecurity, IT general controls, or infrastructure risk within financial services or consulting
Strong working knowledge of cybersecurity operations, controls, and governance practices
Proven ability to independently complete audits from planning through reporting with minimal oversight
Excellent written and verbal communication skills, especially for documenting observations and explaining results to clients
Bachelor's degree
Professional certifications such as CISSP, CISA, or equivalent

Technologies and frameworks

NIST CSF
COBIT
ISO 27001

Compensation and location

Salary range: USD 104,500 - 213,800 per year. Location: Chicago, IL (onsite).

View full job page →

3mo ago

Financial Services Cybersecurity Internal Audit Manager

Crowe Atlanta, GA

Atlanta, GA

3mo ago Closed

$105k - $214k/yr Full time Manager Audit Management Cyber Resilience

This position is no longer accepting applications (closed Jul 3, 2026).

Job Description

Crowe LLP offers an onsite opportunity in Atlanta, GA with a competitive annual salary range of USD 104,500 to 213,800. This role centers on delivering internal audits and advisory engagements across cybersecurity for financial services clients to strengthen security posture and regulatory compliance.

Responsibilities

Plan and execute audits across cybersecurity and IT infrastructure domains, spanning security operations centers, data governance, third party risk management, cyber resilience, and incident response.
Assess infrastructure risk controls and perform second line of defense reviews, including infrastructure level incident and problem management.
Coordinate integrated cyber audits alongside business and operational auditors to ensure comprehensive coverage.
Evaluate the design and operating effectiveness of technical cybersecurity controls against regulatory expectations and frameworks such as NIST CSF, COBIT, and ISO 27001.
Prepare thorough audit documentation, reports, and deliverables independently and on schedule.
Communicate audit procedures, findings, and recommendations directly to client stakeholders, translating technical details for both technical and non-technical audiences.
Maintain audit quality and responsiveness throughout the engagement lifecycle to support client satisfaction and confidence.

Requirements

Minimum of five years of total professional experience, including at least three years of hands-on internal auditing in cybersecurity, IT general controls, or infrastructure risk within financial services or a consulting environment.
Strong working knowledge of cybersecurity operations, controls, and governance practices.
Ability to independently manage audits from planning through reporting with minimal oversight.
Excellent written and verbal communication skills, particularly for documenting observations and explaining results to clients.
Bachelor's degree required.
Professional certifications such as CISSP, CISA, or equivalent.

View full job page →

5mo ago

Information Risk Senior Manager

Freddie Mac McLean, VA

McLean, VA

5mo ago Closed

$170k - $256k/yr Full time Manager Senior Compliance

This position is no longer accepting applications (closed Apr 18, 2026).

Job Description

Overview

Freddie Mac’s mission to Make Home Possible guides every effort. Since our charter in 1970, we have helped more than 90 million families across the United States. This onsite role in McLean, VA supports a meaningful purpose within a purpose-driven organization.

Position Overview

Are you prepared to apply extensive Operational Risk expertise to the mortgage servicing sector? We are inviting a seasoned leader to join our Operational Risk Management (ORM) team and architect an independent third-party risk function that serves all Freddie Mac divisions. If you bring deep third-party risk knowledge, a strategic program management approach, and the ability to build a high-caliber risk team, we’d love to connect. This position is based onsite in McLean, VA.

Your Impact

Freddie Mac’s ORM is an independent second line of defense responsible for designing, implementing, and overseeing an effective operational risk management framework in alignment with Enterprise Risk Management (ERM) and FHFA expectations. This is where purpose meets impact—contributing to Freddie Mac’s mission of making home possible for millions of families.

Key Responsibilities

Assist the Director in developing and operationalizing the third-party risk oversight strategy, annual plan, and quarterly scoping methodology across all third-party types.
Challenge divisions when risk management activities fall short of corporate or regulatory requirements.
Serve as a subject matter expert, providing advisory services and/or training to support divisions in managing third-party risk.
Partner with and oversee First Line Enterprise Governance Groups and shared services organizations to ensure effective enterprise-wide governance and risk management programs.
Develop and implement reporting and analytics requirements for metrics to inform the risk profile.
Escalate gaps and deficiencies to the appropriate partners.
Foster positive relationships with partners across all three lines of defense.

Qualifications

Bachelor’s Degree or equivalent work experience with 10+ years of overall experience.
7+ years of experience in Operational Risk Management or third-party risk within financial services or Mortgage Servicing.
2+ years of people management experience.
Proven ability to influence others, including at the executive level, and bring teams together toward a common goal.
Strong verbal and written communication skills with the ability to present complex content clearly.
Highly motivated, results-oriented, and viewed as a valued partner.

Keys to Success in this Role

Strong understanding of seller/servicer relationships with Freddie Mac.
Self-motivated, growth-minded leader with deep domain expertise.
Detail-oriented with the ability to balance priorities against organizational goals and operational excellence.
Proven experience building and managing enterprise programs.
Prior experience using a governance, risk and/or Compliance GRC system.
Solid situational analysis and decision-making abilities.

Location

McLean, Virginia 22102 — onsite

View full job page →

Third-Party Risk Finance Jobs

Financial Services Cybersecurity Internal Audit Manager

Financial Services Cybersecurity Internal Audit Manager

Information Risk Senior Manager

Get Third-Party Risk Finance Jobs alerts