Cybersecurity Manager

About the role

Crowe is seeking a Cybersecurity Manager to join its consulting practice. In this role you will work directly with client stakeholders to understand cybersecurity and operational resilience needs, collaborate with engagement teams to plan and execute assessments, and deliver actionable findings that enhance security posture, regulatory compliance, and business continuity. The position emphasizes continuous learning, collaboration across teams, and the use of emerging AI capabilities to improve efficiency and client outcomes. Crowe values Care, Trust, Courage, and Stewardship, and expects all employees to act ethically and with integrity.

Responsibilities

• Plan and execute cybersecurity and resilience assessments across technology and operational domains, including:
  • Data protection and information governance
  • HIPAA Security and Privacy Rule assessments
  • Third‑party and vendor risk management
  • Incident response, cyber resilience, and disaster recovery
  • Business continuity and operational resilience
  • Infrastructure and application security controls
• Assess the design and operating effectiveness of cybersecurity and resilience controls against applicable regulatory requirements and industry frameworks (e.g., HIPAA, NIST CSF, NIST SP 800‑53, ISO 27001).
• Support integrated assessments that evaluate how cybersecurity controls enable broader business and operational resilience objectives.
• Act as a strategic advisor to client security and risk functions, helping to build, enhance, and operationalize cybersecurity programs across governance, risk, compliance (GRC), and business resiliency domains.
• Serve as an extension of client teams to lead or support program execution activities, including control implementation, metrics/reporting, issue remediation, and continuous‑improvement initiatives.
• Mentor and supervise junior consultants; contribute to team development and internal knowledge‑sharing.
• Prepare clear, thorough documentation, reports, and deliverables independently and on schedule.
• Communicate assessment scope, procedures, findings, and recommendations to both technical and non‑technical client stakeholders.
• Maintain engagement quality and responsiveness throughout the delivery lifecycle, ensuring client confidence and satisfaction.

Basic Qualifications

• Minimum of 5 years of total professional experience.
• 4+ years of hands‑on experience delivering cybersecurity or IT risk assessments.
• Strong working knowledge of:
  • Cybersecurity operations and controls
  • Data protection principles
  • HIPAA Security and Privacy Rule requirements
• Demonstrated ability to independently manage engagements from planning through reporting with limited oversight.
• Strong written and verbal communication skills, particularly in documenting observations and explaining results to diverse audiences.
• Bachelor’s degree.
• One or more relevant professional certifications (e.g., CISSP, CISA, HCISPP, or equivalent).

Preferred Qualifications

• Experience assessing or advising on:
  • Department of Defense Cybersecurity Maturity Model Certification (CMMC)
  • HIPAA compliance
  • Cybersecurity programs
  • Business continuity and disaster recovery
  • Operational or cyber resilience initiatives
• Prior experience at a public accounting or advisory firm delivering cybersecurity, privacy, or resilience services to healthcare or life‑sciences organizations.

Pay

Estimated salary range: $104,500.00 – $213,800.00 per year (subject to factors such as skill set, experience, certifications, and geographic location).

Benefits

• Comprehensive total rewards package.
• Career Coach to guide ongoing career goals and aspirations.
• Inclusive culture that values diversity and provides flexible work arrangements to balance work and life moments.
• Opportunities for professional growth, leadership development, and exposure to innovative AI‑enabled tools.