Manager · National
Grant Thornton · New York, New York · Hybrid
Apply on Grant Thornton's site →Goes straight to the employer's own hiring page. We never sit in between.
Plan and lead cybersecurity internal audits and risk assessments for client organizations, including control testing and maturity evaluations.
Worth knowing: Requires CISA or CISSP certification
Company: Job title: Risk Cyber Internal Audit Manager Location: New York, NY, United States As a member of Grant Thornton’s Cybersecurity Internal Audit (IA Cybersecurity) team, you will have the opportunity to collaborate with our clients and deliver consulting and advisory services across a broad spectrum of areas related to cybersecurity. You will support clients in evaluating and enhancing their Cybersecurity risk posture through internal audits, control testing, and maturity assessments. You’ll work closely with cross-functional across risk and compliance teams to assess risks, test controls, and provide actionable insights aligned with industry standards and regulatory frameworks. As an IA Cybersecurity Risk Manager, you will get the opportunity to contribute to our clients' business needs and grow within our practice by applying a collection of Cybersecurity capabilities, including governance, risk assessments, control testing, and technology operations for the Cybersecurity practice, all with the resources, environment, and support to help you excel. From day one, you’ll be empowered by the greater Cyber & Risk Advisory team to help clients make the moves that will help them achieve their vision and help you grow your Cybersecurity knowledge. Your day-to-day may include: Assist in planning and executing Cybersecurity internal audits, risk assessments, and control testing engagements. Lead walkthroughs, interviews, and workshops with client stakeholders to understand security processes and technology environments. Perform Cybersecurity control testing and Cybersecurity program capability assessments. Conduct Cybersecurity maturity assessments using frameworks such as NIST CSF, CSA CCM, ISO/IEC 27001, COBIT, and HITRUST. Support assessments for regulatory compliance including HIPAA, FedRAMP, GLBA, GDPR, and state-led data breach notification laws. Document process, risk and control improvement considerations, develop risk-based recommendations, and develop client deliverables. Identify emerging technology risks (i.e., AI, Cloud, Quantum-computing risks), deep-dive into AI model risks, supply-chain risks, document control deficiencies and develop risk mitigation strategies. Develop roadmaps to help clients mitigate Cyber risks and enhance overall Cybersecurity posture.
Pay, CPA exam support and hiring patterns at Grant Thornton
All open Grant Thornton jobs on this board
Every job links to the employer's own site. This job board is free: no ads, no account.