Joseph Crouse

About Joseph Crouse

Dynamic cybersecurity leader with extensive experience driving transformative initiatives in the financial sector. Proven track record in managing global teams and executing strategic programs that enhance operational efficiency and elevate client satisfaction. A passionate advocate for building high-performing, inclusive teams, I excel in risk management and aligning cybersecurity strategies with business objectives to deliver measurable outcomes. Currently pursuing CISSP certification to deepen my technical expertise in the evolving fintech landscape.Relevant Experience* Managed and executed cyber risk assessments against the CRI Profile, NIST CSF, and FFIC CAT frameworks for top 10 financial service clients.* Assisting clients to create and execute roadmaps based on risk assessments results including estimating investment needs (internal / external resourcing needs, financial investments, technology investments, automation opportunities).* Creating and implementing cyber controls library, policy and standards, and metrics against domestic and global regulatory and risk frameworks across Cyber Governance, Risk, and Compliance (GRC), Data Protection, Incident Management, Security Monitoring, Application Security, Endpoint Protection, Network and Infrastructure Security, Threat & Vulnerability Management, Third-Party Risk Management, Business Continuity and Disaster Recovery, and Asset Management.* Assisting Cyber Risk Institute (CRI) to uplift their version 2.0 diagnostic statements including alignment to domestic and international cybersecurity regulations, requirement categorization tagging, and impact tiering.* Responsible for performing annual compliance assessments (e.g, NYDFS, SWIFT CSP, Sheltered Harbor) for top 10 banking clients.* Has experience in following risk and compliance frameworks: NIST CSF, CRI Profile, CRI Cloud Extension, FFIEC CAT, FFIEC IT Handbook, SEC Cyber Rulings, ASIC, APRA, NAIC, NIST 800-53, HIPAA, ISO 27001, ISO 27002, SWIFT CSP, PCI-DSS, EU GDPR, and Sheltered Harbor Operating Rules.

Experience

1. Cybersecurity and Tech Risk Director

   KPMG US

   Oct 2025 — Present · Charlotte, NC, US

   Director in KPMG\'s Financial Services Cybersecurity & Tech Risk practice, I bring extensive leadership in navigating the complex cyber and technology risk landscape for top-tier banks, insurance companies, asset managers, and fintechs. My expertise lies in architecting and delivering robust cybersecurity and risk management programs that align with evolving regulatory expectations (NYDFS, FFIEC, OCC, SEC) and strategically enhance business resilience and digital trust.I collaborate with C-level executives and boards to transform cybersecurity postures, implement risk and control frameworks, and ensure regulatory readiness. My advisory spans critical areas including cyber risk quantification, third-party risk management, security transformations, and operational resilience, aimed at future-proofing clients against dynamic threats.Areas of Impact & ExpertiseStrategic Program Leadership: I spearhead complex, end-to-end cybersecurity risk and regulatory readiness engagements, delivering enhanced security postures and ensuring compliance for financial institutions.Framework Implementation & Governance: I advise clients on adopting and maturing industry-leading frameworks such as NIST CSF, ISO 27001, and CRI Profile, integrating these into risk programs to meet regulatory demands and accelerate organizational maturity.Cyber Transformation: Lead transformation programs across identity, cloud, and data protection, enabling clients to build scalable, regulatory-aligned, and resilient cyber capabilities that adapt to today\'s dynamic risk environment.Leadership & Stakeholder Alignment: Lead cross-functional teams that deliver insights and strategic recommendations assisting senior leadership and Boards in investment decisions.Innovation in Cyber Risk Methodologies: I champion the development and implementation of innovative cyber risk methodologies, metrics, and threat-informed strategies, enhancing clients\' ability to proactively manage and quantify cyber risks.

Education

• James Madison University

  Bachelor’s Degree, Accounting

• James Madison University

  Master's degree, Accounting