Cyber Security Risk Manager

Are you passionate about helping organizations navigate acquisitions, divestitures, carve-outs, and strategic investments from a Cyber Security perspective?

We are looking for a Cyber Security Risk & Due Diligence professional to join a global team supporting strategic corporate transactions and helping decision-makers understand cyber risks before, during, and after a deal.

This position combines Cyber Security, M&A, Due Diligence, Risk Advisory, and Project Management within a highly international environment.

Your Mission

As the Cyber Security lead within M&A transactions, you will evaluate the cyber risk exposure of acquisition targets, businesses being divested, joint ventures, and strategic investments.

You will work closely with Corporate M&A, Legal, Data Privacy, IT, Business Leaders, external advisors, and Cyber Security SMEs to ensure cyber risks are properly assessed, understood, and managed throughout the transaction lifecycle.

Key Responsibilities

• Lead Cyber Security Due Diligence workstreams during acquisitions, investments, divestitures, and carve-outs.
• Assess the security maturity and cyber posture of target organizations.
• Review infrastructure, cloud environments, applications, data, identity management, OT environments, third-party relationships, and security governance frameworks.
• Identify transaction-related cyber risks and evaluate their potential operational, financial, contractual, and regulatory impact.
• Translate technical findings into executive-level risk reports and recommendations.
• Support transaction negotiations by providing cyber risk insights to decision-makers.
• Define and track remediation plans and risk mitigation actions.
• Support Day-1 Readiness, Transition Service Agreements (TSAs), integration planning, separation planning, and Post-Merger Audit activities.
• Coordinate internal Cyber Security experts and external advisors across multiple regions.

Ideal Background

We are particularly interested in professionals coming from:

• Technology Risk Advisory
• Transaction Services
• M&A Consulting
• Cyber Security Consulting

Must-Have Requirements

• Experience in Cyber Security Governance, Risk & Compliance (GRC), Cyber Risk Management or Technology Risk.
• Experience conducting Cyber Security Risk Assessments and risk remediation activities.
• Previous exposure to M&A transactions, acquisitions, divestitures, carve-outs, integrations, separations, or Due Diligence environments.
• Experience preparing executive-level risk assessments and reports.
• Ability to explain technical Cyber Security findings in business language.
• Experience interacting with senior executives and decision-makers.

Strongly Preferred

• M&A Integration or Separation experience.
• Carve-out projects.
• Transition Service Agreements (TSA).
• Technology Risk Advisory experience within a consulting environment.
• Experience assessing target companies before acquisitions.
• Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor.

Why Join?

• Work on strategic global transactions.
• Direct exposure to executive stakeholders and corporate decision-making.
• Influence investments, acquisitions, and divestitures from a Cyber Security perspective.
• Combine Cyber Security expertise with business strategy and M&A.
• International and multicultural environment.
• Flexible hybrid working model.

Keywords

Cyber Due Diligence | M&A Cyber Security | Transaction Services | Technology Risk | Cyber Advisory | Risk Advisory | Carve-Out | Divestiture | Acquisition | Post-Merger Integration | TSA | Cyber Risk Management | Information Security | GRC | Corporate Development | ISO 27001 | NIST | Third-Party Risk | Cyber Assessment