Cybersecurity Senior Consultant

At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you’re trusted to deliver results and make an impact. We embrace you for who you are, care for your well-being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That’s why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services.

About the role

Consulting at Crowe is a dynamic business focused on solving problems for our clients and serving our core markets through innovative solutions. As technology and AI continue to reshape the consulting landscape, we are looking for individuals who are curious, adaptable, and eager to learn. In this role, you will continuously learn, collaborate across teams, and explore how tools, including emerging AI capabilities, can improve efficiency, insights, and client outcomes. As you grow, you’ll take ownership of client relationships, contribute to account strategy, and support the delivery of high-impact work. Developing a sense of account leadership—understanding client needs, ensuring delivery excellence, and building trusted partnerships—is key to success.

At Crowe, we bring deep industry specialization and functional expertise to help organizations manage cybersecurity risk, protect sensitive information, and strengthen operational and business resilience. As a Cybersecurity Senior Consultant, you will work directly with client stakeholders to evaluate cybersecurity and resilience capabilities and support the maturity of programs across clients’ environments.

Responsibilities

• Plan and execute cybersecurity and resilience assessments across technology and operational domains, including:
  • Data protection and information governance
  • HIPAA Security and Privacy Rule assessments
  • Third-party and vendor risk management
  • Incident response, cyber resilience, and disaster recovery
  • Business continuity and operational resilience
  • Infrastructure and application security controls
• Assess the design and operating effectiveness of cybersecurity and resilience controls against applicable regulatory requirements and industry frameworks (e.g., HIPAA, NIST CSF, NIST SP 800-53, ISO 27001).
• Support integrated assessments that evaluate how cybersecurity controls enable broader business and operational resilience objectives.
• Act as a strategic advisor to client security and risk functions, helping to build, enhance, and operationalize cybersecurity programs across domains such as governance, risk, and compliance (GRC) and business resiliency.
• Serve as an extension of client teams to lead or support program execution activities, including control implementation, metrics/reporting, issue remediation, and continuous improvement initiatives.
• Mentor and supervise junior consultants; contribute to team development and internal knowledge-sharing.
• Prepare clear, thorough documentation, reports, and deliverables independently and on schedule.
• Communicate assessment scope, procedures, findings, and recommendations to both technical and non-technical client stakeholders.
• Maintain engagement quality and responsiveness throughout the delivery lifecycle, ensuring client confidence and satisfaction.

Requirements

• Minimum of 3 years of total professional experience.
• 2+ years of hands-on experience delivering cybersecurity or IT risk assessments.
• Strong working knowledge of:
  • Cybersecurity operations and controls
  • Data protection principles
  • HIPAA Security and Privacy Rule requirements
• Demonstrated ability to independently manage engagements from planning through reporting with limited oversight.
• Strong written and verbal communication skills, particularly in documenting observations and explaining results to diverse audiences.
• Bachelor’s degree.

Qualifications

• One or more relevant professional certifications (e.g., CISSP, CISA, HCISPP, or equivalent).
• Experience assessing or advising on:
  • HIPAA compliance
  • Cybersecurity programs
  • Business continuity and disaster recovery
  • Operational or cyber resilience initiatives
• Prior experience at a public accounting or advisory firm delivering cybersecurity, privacy, or resilience services to healthcare or life sciences organizations.

We expect the candidate to uphold Crowe’s values of Care, Trust, Courage, and Stewardship. These values define who we are, and we expect all team members to act ethically and with integrity at all times.

Pay

The wage range for this role takes into account factors such as skill sets, experience and training, licensure and certifications, and other business and organizational needs. The disclosed range estimate has not been adjusted for geographic differentials. A reasonable estimate of the current range is $80,500.00 - $159,300.00 per year.

Benefits

At Crowe, we offer a comprehensive total rewards package designed to support your well-being and career growth. Learn more about our benefits and how we nurture talent in an inclusive culture that values diversity.