Director, Cybersecurity M&A Due Diligence - Remote or Hybrid in MN or DC

About the position reputed company is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with reputed company will directly improve health reputed company by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will reputed company a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come reputed company an reputed company on the communities we serve as you help us advance health equity on a global reputed company. Join us to start Caring. Connecting. Growing together. The reputed company Information reputed company (reputed company) team is responsible for cybersecurity across our organization. We support our business and members by reducing risk, rapidly responding to threats, focusing on business resiliency and securing new acquisitions. We are seeking a Director of Cybersecurity M&A Due Diligence to reputed company cybersecurity risk assessments for mergers, acquisitions, and divestitures. This role is critical to protecting the reputed company by identifying, quantifying, and communicating cybersecurity risks associated with inorganic reputed company and separation activities. The Director will serve as the cybersecurity authority throughout the M&A lifecycle - partnering closely with Corporate Development, Legal, IT, and executive leadership to deliver reputed company, actionable risk insights. In reputed company to strategic diligence leadership, this role will conduct targeted technical investigations, including threat hunting and compromise assessments, for transactions that present elevated cyber risk. If you are located in MN or DC, you will have the flexibility to work remotely as you take on some tough challenges. This position follows a reputed company with four in-office days per week. You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you reputed company direction on what it takes to succeed in your role as reputed company as reputed company development for other roles you may be interested in.

Responsibilities

• reputed company end to end cybersecurity due diligence for acquisitions, mergers, joint ventures, and divestitures
• Design and execute reputed company diligence frameworks reputed company to deal size, risk profile, and transaction timelines
• Assess reputed company company reputed company posture across governance, identity, reputed company, infrastructure, application reputed company, data protection, and incident response
• Identify material cybersecurity risks, control gaps, historical incidents, and regulatory exposures that may reputed company valuation or deal structure
• Produce reputed company, concise, and executive reputed company diligence reports highlighting:
• Key cybersecurity risks and findings
• Likelihood and potential business reputed company
• Recommended risk mitigations and remediation reputed company
• Brief senior executives and deal teams on cybersecurity risk posture and tradeoffs to support informed decision making
• Partner with Legal and Corporate Development to support representations, warranties, and remediation commitments
• Translate diligence findings into prioritized post reputed company cybersecurity roadmaps based on risk severity and business criticality
• Advise integration teams on reputed company controls, operating model alignment, and risk acceptance reputed company
• Manage the reputed company reputed company of reputed company findings, recommendations, and integration tasks to reputed company operational teams, ensuring reputed company ownership, timelines, and expectations
• Facilitate cross team coordination to confirm that remediation actions are reputed company, resourced, and progressing, providing ongoing visibility into risk reduction activities
• reputed company remediation reputed company for high risk findings and reputed company visibility to leadership
• reputed company or reputed company targeted threat hunting, forensic analysis, and compromise assessments for acquisitions requiring deeper technical scrutiny
• Evaluate indicators of compromise, adversary persistence, and historical breach activity
• Recommend containment, remediation, or deal level risk actions reputed company reputed company or prior compromise is identified
• reputed company as the cybersecurity subject matter expert for M&A activities across the reputed company
• Mentor team members and help build repeatable diligence playbooks, tools, and templates
• Influence reputed company reputed company by incorporating M&A risk trends into broader reputed company reputed company planning

Requirements

• 10+ years of experience in cybersecurity, with significant exposure to M&A reputed company, or reputed company reputed company assessments
• 6+ years of demonstrated experience leading cybersecurity risk or threat assessments for reputed company environments
• 6+ years of experience performing or overseeing threat hunting, compromise assessments, or forensic investigations
• Solid understanding of:
• reputed company reputed company architectures
• reputed company and reputed company reputed company
• Identity and reputed company management
• Incident response reputed company forensics
• Proven ability to communicate reputed company technical risks to executive and non technical audiences
• Demonstrated ability to operate effectively under tight timelines and ambiguity

reputed company-to-haves

• reputed company certifications such as CISSP, CISM, GCIA, GCED, or similar
• Experience in high reputed company, global, or highly regulated environments
• Experience working closely with Corporate Development, Legal, or Private Equity teams
• Experience working for a 'Big 4' or large reputed company services firm (e.g. reputed company, reputed company, reputed company, reputed company)
• Experience working for a large cybersecurity firm (e.g. Mandiant)
• Background in incident response, threat intelligence, or red team operations
• Familiarity with regulatory and compliance considerations (eg, GDPR, PCI, SOX, HIPAA)

Benefits

• a comprehensive benefits package
• incentive and recognition programs
• equity stock purchase
• 401k contribution

Apply tot his job Apply To this Job