Jobs › Crowe

Financial Services Cybersecurity Internal Audit Senior Consultant

Crowe · Chicago, IL · $80,500–$159,300 a year · Full time

Posted Sep 3, 2026 · We last checked this listing on Oct 6, 2026

Apply at Crowe

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

You'd present findings to senior executives and boards. How do you explain a technical risk to a board in a way that leads to a decision?

What they are checking: Whether they can turn technical findings into business risk and clear choices, because boards need decisions, not technical detail.

You'd mentor and supervise junior consultants. How do you bring someone up in this work?

What they are checking: Whether they can coach and review junior staff effectively, because developing others is an expected responsibility at this level.

What would you do

You'd assess business resiliency and incident response readiness. How do you test whether a plan would actually work?

What they are checking: The difference between a written plan and a real capability

A client pushes back hard on a finding. How do you handle it?

What they are checking: Whether they can defend a well-supported finding calmly while staying open to new evidence, because audit value depends on independence.

About the work

This role runs cybersecurity risk assessments and information technology internal audits for financial services clients. Walk me through an audit you led.

What they are checking: Whether they have led audits from planning through reporting, because this role expects ownership of engagements rather than supporting someone else's work.

You'd evaluate and test information technology controls, application controls, security configurations and integration security. Take one and tell me how you actually test it.

What they are checking: Whether they can explain how they actually gather evidence and test a control, which shows real practice instead of a memorized control list.

The posting names aligning programs with recognized security frameworks. Which have you worked against, and where do they fall short?

What they are checking: Whether they know frameworks like NIST well enough to see their limits, which shows they apply them with judgment rather than by rote.

You'd advise on identity and access management, data protection and cloud security across major cloud platforms. Which platform do you know best, and at what depth?

What they are checking: Whether they honestly describe their cloud security depth, because advising banks on cloud controls requires real knowledge, not just familiarity.

You'd assess use of artificial intelligence and machine learning in business processes with a focus on secure implementation. What would you be looking for?

What they are checking: Whether they think through data, model access, monitoring and governance risks, because secure use of AI is a newer area clients are asking about.

What is different about a cybersecurity audit at a bank compared with another industry?

What they are checking: Whether they understand banking regulation, examiner expectations and sector threats, because the posting requires financial services cybersecurity experience.

Practice this interview out loud.

Offer builds a real interview for this exact role at Crowe from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Crowe.

Your Journey at Crowe Starts Here: At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you’re trusted to deliver results and make an impact. We embrace you for who you are, care for your well-being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That’s why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services. Join us at Crowe and embark on a career where you can help shape the future of our industry. Job Description: What It Means to Be a Consultant at Crowe Consulting is a dynamic business focused on solving problems for our clients and serving our core markets through innovative solutions. As technology and AI continue to reshape the consulting landscape, we are looking for individuals who are curious, adaptable, and eager to learn. At Crowe, consultants are expected to build both technical and transferable skills, think critically, and use technology to solve real business problems. In this role, you will continuously learn, collaborate across teams, and explore how tools, including emerging AI capabilities, can improve efficiency, insights, and client outcomes. As you grow, you’ll also begin to take ownership of client relationships, contribute to account strategy, and support the delivery of high-impact work. Developing a sense of account leadership, including understanding client needs, ensuring delivery excellence, and building trusted partnerships, is part of what sets successful consultants apart. Success in this role comes from a growth mindset, strong communication skills, advanced critical thinking, and the ability to navigate new challenges with confidence. As a Cybersecurity Senior Consultant , you will help organizations navigate an evolving threat landscape and a complex regulatory environment by delivering high-value, practical cybersecurity and risk solutions. You will work with clients across industries to assess cybersecurity posture, design security programs, evaluate IT controls, and implement transformative strategies including the responsible integration of artificial intelligence into security programs. This role is ideal for professionals who thrive in a fast-paced consulting environment, enjoy solving complex problems, and are passionate about delivering results that protect and enable business success. Key Responsibilities: • Lead or support cybersecurity risk assessments, IT internal audits, and regulatory readiness efforts (e.g., HIPAA, GDPR, CMMC, etc). • Evaluate and test IT controls, application controls, security configurations, and interface/integration security. • Provide guidance on security architecture, identity and access management (IAM), data protection, and cloud security across Azure, AWS, or GCP. • Assess and advise on emerging technologies including AI/ML use in business processes, with a focus on responsible and secure implementation. • Conduct assessments focused on business resiliency and incident response readiness and/or enable organization to enhance or mature their business resiliency. • Support clients in aligning their cybersecurity programs with leading frameworks (NIST CSF, NIST 800.53, CIS, integrated control frameworks, etc.). • Present findings and recommendations to stakeholders, including C-suite and board-level leadership, through clear, concise written and verbal communication. • Act as a strategic advisor to client security and risk functions, helping to build, enhance, and operationalize cybersecurity programs across domains such as governance, risk, and compliance (GRC) and business resiliency. • Serve as an extension of client teams to lead or support program execution activities, including control implementation, metrics/reporting, issue remediation, and continuous improvement initiatives. • Mentor and supervise junior consultants; contribute to team development and internal knowledge-sharing. • Participate in practice development, including service innovation and thought leadership. Basic Qualifications • Bachelor’s degree in information systems, Computer Science, Cybersecurity, Engineering, or related field. • 2+ years of experience in cybersecurity, IT audit, risk advisory, or related consulting or industry roles. • Working knowledge of operating systems (Windows, Linux/Unix) and databases (SQL, Oracle, etc.). • Familiarity with regulatory compliance and cybersecurity frameworks. Preferred • Strong project management, critical thinking, and interpersonal skills. • Excellent communication and technical writing skills, with the ability to tailor messages to both technical and executive audiences. • Experience with or curiosity about AI and automation tools in cybersecurity, including secure implementation practices and risk assessments • Progress toward or possession of certifications such as CISSP, CRISC, CISM, or similar. We expect the candidate to uphold Crowe’s values of Care, Trust, Courage, and Stewardship. These values define who we are. We expect all of our people to act ethically and with integrity at all times. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. Crowe is not sponsoring for work authorization at this time. The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Crowe, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $80,500.00 - $159,300.00 per year. Our Benefits: Your exceptional people experience starts here. At Crowe, we know that great people are what makes a great firm. We care about our people and offer employees a comprehensive total rewards package. Learn more about what working at Crowe can mean for you! How You Can Grow: We will nurture your talent in an inclusive culture that values diversity. You will have the chance to meet on a consistent basis with your Career Coach that will guide you in your career goals and aspirations. Learn more about where talent can prosper! More about Crowe: Crowe provides professional services through two separate entities: Crowe LLP delivers audit and attest services, and Crowe Advisory LLC provides tax, advisory, consulting, and other nonattest services. The Crowe Global network consists of more than 300 independent accounting and advisory services firms in more than 150 countries around the globe, making it one of the largest accounting networks in the world*. As independent members of Crowe Global, Crowe LLP and Crowe Advisory LLC serve clients worldwide. (*As of July 2026) Crowe LLP and Crowe Advisory LLC (and their respective subsidiary entities) provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, sexual orientation, gender identity or expression, genetics, national origin, disability or protected veteran status, or any other characteristic protected by federal, state or local laws. Crowe LLP and Crowe Advisory LLC (and their respective subsidiary entities) does not accept unsolicited candidates, referrals or resumes from any staffing agency, recruiting service, sourcing entity or any other third-party paid service at any time. Any referrals, resumes or candidates submitted to Crowe, or any employee or owner of Crowe without a pre-existing agreement signed by both parties covering the submission will be considered the property of Crowe, and free of charge. Crowe will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, Los Angeles County Fair Chance Ordinance, San Francisco Fair Chance Ordinance, and the California Fair Chance Act. Please visit our webpage to see notices of the various state and local Ban-the-Box laws and Fair Chance Ordinances, where applicable. We are committed to a merit-based hiring process, evaluating all candidates consistently using objective, job-related criteria such as relevant experience, demonstrated skills, measurable impact, and alignment with the role’s responsibilities, and making employment decisions in a fair and inclusive manner free from discrimination. If you are interested in applying for employment with Crowe and are in need of an accommodation or require special assistance to navigate our website or to complete your application, please visit our Applicant Assistance and Accommodations page for more information: https://careers.crowe.com/crowe-applicant-assistance-and-accommodation

Apply at Crowe