Senior Manager A&D Cybersecurity

Overview

We are seeking a Senior Manager, M&A Security to lead cybersecurity activities supporting acquisitions, divestitures, and strategic business transactions. This individual will serve as the Information Security lead for M&A initiatives, partnering with executive leadership, legal, compliance, infrastructure, application, and business teams to assess cyber risk, perform security due diligence, and execute post-transaction security integration strategies.

The ideal candidate combines strong cybersecurity expertise with hands-on M&A experience and the ability to lead complex, cross-functional initiatives in highly regulated environments.

WKey Responsibilities

M&A Cybersecurity Due Diligence

• Lead cybersecurity due diligence assessments for acquisition and divestiture targets.
• Evaluate target organizations' security posture, controls, technologies, regulatory obligations, and cyber risks.
• Identify vulnerabilities, compliance gaps, control deficiencies, and integration risks.
• Develop executive-level risk assessments and transaction recommendations.

Integration & Divestiture Leadership

• Serve as the Information Security lead for M&A integration and separation workstreams.
• Develop and execute Day-1, Day-100, and long-term security integration plans.
• Lead cybersecurity activities related to:
• Identity & Access Management (IAM)
• Network Security
• Endpoint Security
• Vulnerability Management
• Security Operations
• Data Protection
• Cloud Security
• Third-Party Risk Management
• Coordinate security separation and carve-out activities during divestitures.

Risk Management & Governance

• Establish security governance models for newly acquired or divested entities.
• Conduct risk assessments and define remediation strategies.
• Create executive dashboards, metrics, and risk reporting.
• Ensure compliance with applicable security frameworks and regulatory requirements.

Stakeholder Management

• Partner with Legal, Compliance, Privacy, Infrastructure, Architecture, Operations, and Executive Leadership teams.
• Facilitate steering committee meetings and executive risk reviews.
• Drive accountability across cross-functional integration teams.
• Communicate technical risks to both technical and non-technical audiences.

Requirements

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, or related field.
• 7+ years of cybersecurity experience.
• 5+ years of experience supporting mergers, acquisitions, divestitures, or large-scale security integrations.
• Deep understanding of:
• NIST Cybersecurity Framework
• ISO 27001
• Risk Management
• Security Governance
• Security Controls Assessment
• Experience conducting cybersecurity due diligence for acquisition targets.
• Strong knowledge of:
• IAM
• Vulnerability Management
• Security Operations
• Cloud Security
• Data Protection
• Third-Party Risk
• Proven ability to lead matrixed teams and drive initiatives with limited oversight.
• Experience presenting cybersecurity risks and recommendations to executive leadership.

Preferred Qualifications

• Healthcare, life sciences, pharmaceutical, biotechnology, or regulated industry experience.
• Experience leading cybersecurity workstreams for multiple acquisitions and divestitures.
• Familiarity with:
• COBIT
• ITIL
• NIST 800-53
• FedRAMP
• GDPR
• HIPAA
• Experience with Day-1 readiness and Day-100 integration planning.
• Consulting experience supporting M&A transactions.

Preferred Certifications

• CISSP
• CISM
• CRISC
• CCSP
• ISSAP
• PMP