{"id":1135304,"url":"https://alion.io/job/grant-thornton-risk-cyber-internal-audit-manager","title":"Risk Cyber Internal Audit Manager","company":{"id":1045227,"name":"Grant Thornton","domain":"grantthornton.com","url":"https://alion.io/company/grant-thornton-2","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":76,"open_postings":28,"ghost_share":0,"stale_share":0.964,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":138000,"max":172500,"currency":"USD","period":"year","gross":null,"usd_annual":172500},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"FedRAMP","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false}],"status":"closed","first_seen_at":"2026-08-25T13:59:46Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-10T15:16:33Z","board_verified":false,"closed_at":"2026-10-10T15:16:33Z","days_open":46,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":46},"description":"As a member of Grant Thornton’s Cybersecurity Internal Audit (IA Cybersecurity) team, you will have the opportunity to collaborate with our clients and deliver consulting and advisory services across a broad spectrum of areas related to cybersecurity. You will support clients in evaluating and enhancing their Cybersecurity risk posture through internal audits, control testing, and maturity assessments. You’ll work closely with cross-functional across risk and compliance teams to assess risks, test controls, and provide actionable insights aligned with industry standards and regulatory frameworks.\nAs an IA Cybersecurity Risk Manager, you will get the opportunity to contribute to our clients' business needs and grow within our practice by applying a collection of Cybersecurity capabilities, including governance, risk assessments, control testing, and technology operations for the Cybersecurity practice, all with the resources, environment, and support to help you excel.\nFrom day one, you’ll be empowered by the greater Cyber & Risk Advisory team to help clients make the moves that will help them achieve their vision and help you grow your Cybersecurity knowledge.\nYour day-to-day may include:\nAssist in planning and executing Cybersecurity internal audits, risk assessments, and control testing engagements.\nLead walkthroughs, interviews, and workshops with client stakeholders to understand security processes and technology environments.\nPerform Cybersecurity control testing and Cybersecurity program capability assessments.\nConduct Cybersecurity maturity assessments using frameworks such as NIST CSF, CSA CCM, ISO/IEC 27001, COBIT, and HITRUST.\nSupport assessments for regulatory compliance including HIPAA, FedRAMP, GLBA, GDPR, and state-led data breach notification laws.\nDocument process, risk and control improvement considerations, develop risk-based recommendations, and develop client deliverables.\nIdentify emerging technology risks (i.e., AI, Cloud, Quantum-computing risks), deep-dive into AI model risks, supply-chain risks, document control deficiencies and develop risk mitigation strategies. \nDevelop roadmaps to help clients mitigate Cyber risks and enhance overall Cybersecurity posture.\nStay current on Cybersecurity trends, threat landscapes, and regulatory developments. This includes technical familiarity with common Cybersecurity tools, cloud environment/architecture, and threat vectors. \nProvide mentorship and training to junior team members by reviewing their work, offering guidance on risk assessment methodologies, and supporting their professional development to enhance overall team capability.\nContribute to project management tasks such as scheduling, documentation, and status reporting to ensure smooth execution of projects.\nSupport client engagements from start to finish, which includes planning, fieldwork (including control testing), and reporting.\nParticipate in professional development activities and training sessions on regular basis.\nAssist with business development initiatives, including proposal preparation, research, and developing client presentations.\nAdhere to the highest degree of professional standards and strict client confidentiality.\nOther job duties as assigned.\nYou have the following technical skills and qualifications:\nBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field is required.\nMaster’s degree in Cybersecurity related field preferred \n5+ years of experience in Cybersecurity, internal audit, or IT risk.\nCISA, CISSP or similar professional certifications (CISA, and CISSP) required.\nExperience as a client serving professional for a consulting firm desired.\nFamiliarity with Cybersecurity frameworks and standards including (but not limited to):NIST CSF, NIST 800-53, NIST 800-171\nNIST AI RMF\nCSA CCM\nISO/IEC 27001, ISO/IEC 27002\nHIPAA, FedRAMP, GLBA, CCM\nCOBIT, HITRUST, PCI DSS\n\nFunctional understanding of IT, Cybersecurity, AI, cloud security, data protection, vulnerability management, and incident response.\nStrong understanding of the cloud shared responsibility model and how that may impact clients. \nAbility to communicate clearly and effectively (oral and written) with all internal and external stakeholders.\nAbility to deliver presentations to clients on Cybersecurity risk assessments, findings, and recommendations\nStrong project management skills and the ability to execute multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment.\nAbility to travel to client locations (as needed).\nThe base salary range for this position is between $138,000 and $172,500. Placement within the pay range is at Grant Thornton’s discretion, and it is based on multiple factors, including but not limited to, job -related knowledge/skills, experience, business needs, progression within the role, geographic location, and internal equity. At Grant Thornton, compensation decisions are dependent upon the facts and circumstances of each position and candidate.\n#Hybrid","description_format":"text","description_chars":5069,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Professional Services","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-23T07:30:51Z"},{"event":"close","at":"2026-10-10T15:16:33Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 60","filings_12m":0,"filings_prev_12m":4,"green_card_filings_12m":60,"median_offered_wage_usd":117500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":null,"pay":{"stated_usd_annual":172500,"is_top_pay":true},"html_url":"https://alion.io/job/grant-thornton-risk-cyber-internal-audit-manager","json_url":"https://alion.io/job/grant-thornton-risk-cyber-internal-audit-manager.json","meta":{"generated_at":"2026-10-26T04:15:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5849,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1045227},"rest":"https://alion.io/mcp/rest/get_company?id=1045227"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgrant-thornton-risk-cyber-internal-audit-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgrant-thornton-risk-cyber-internal-audit-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgrant-thornton-risk-cyber-internal-audit-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/grant-thornton-risk-cyber-internal-audit-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgrant-thornton-risk-cyber-internal-audit-manager"}]}