A&D Post-Close Security Director

This is a fully remote position, open to applicants in Alabama, +45 more states.

📋 Description

• Establish, manage, and consistently enhance the enterprise cybersecurity framework for post-close acquisitions, divestitures, licensing agreements, separations, integrations, minority investments, and strategic alliances.

• Provide executive leadership and oversight for post-close mobilization, Day 1 stabilization, transition governance, risk remediation, integration and separation execution, TSA delivery and exit, as well as ongoing portfolio performance.

• Develop post-close cybersecurity strategy, governance, standards, operating rhythms, decision-making rights, and escalation procedures.

• Transform deal scope, due diligence findings, Day 1 requirements, regulatory obligations, TSA assumptions, milestones, risks, and dependencies into prioritized action plans.

• Offer executive and technical oversight for identity management, endpoints, infrastructure, cloud services, applications, data protection, monitoring, incident response, third parties, regulatory obligations, and TSA delivery and exit.

• Diagnose complex cybersecurity and technology issues, question proposed architectures and exceptions, and make informed risk decisions.

• Ensure that findings are prioritized, assigned, documented, escalated, and resolved or formally accepted, including control validation and reporting.

• Oversee multiple deals, workstreams, vendors, transition services, budgets, milestones, and dependencies concurrently.

• Propel automation for intake, tracking, evidence, controls, notifications, dashboards, metrics, and reporting.

• Relay progress, regulatory implications, risks, decisions, dependencies, business impacts, and resource requirements to executives and governance forums.

• Maintain playbooks, runbooks, templates, RACI models, capability standards, lessons learned, handoff criteria, and Definition of Done requirements.

• Mentor and develop managers, cybersecurity professionals, deal leads, project managers, and cross-functional contributors.

⛳️ Requirements

• A Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related field.

• Over 12 years of progressive experience in cybersecurity, information risk management, technology leadership, M&A transaction support, integration or separation, or related fields.

• Proven experience in leading cybersecurity programs that support acquisitions, divestitures, licensing, minority investments, strategic partnerships, or other complicated business transactions.

• In-depth regulatory and compliance knowledge.

• Extensive technical expertise in security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, security operations, incident response, third-party risk, privacy, and cyber resilience.

• Experience in troubleshooting intricate cybersecurity and technology issues at a Director level.

• Familiarity with ISRM policy, capability, architecture, risk, and control owners.

• Ability to influence executives and drive cross-functional initiatives in complex, global environments.

• Strong understanding of the NIST Cybersecurity Framework, ISO 27001, NIST 800-series publications, GDPR, HIPAA, and other relevant requirements.

• Experience managing portfolios that involve multiple concurrent deals, assessments, workstreams, vendors, senior stakeholders, dependencies, and time-sensitive decisions.

• Exceptional skills in executive communication and presentation.

• Capability to navigate ambiguity, maintain transaction confidentiality, drive organizational change, and enhance repeatability through data, tools, automation, and disciplined governance.

• Preferred: experience in developing or operating A&D cybersecurity playbooks, questionnaires, control libraries, risk-scoring methods, RACI models, handoff criteria, and phase-based transaction standards.

• Preferred: experience in designing automation for intake, evidence collection, risk reporting, workflow orchestration, dashboards, and portfolio governance.

• Preferred: experience collaborating with Corporate Development, Legal, Privacy, Finance, Technology Services, business technology teams, IMO/SMO functions, external advisors, and managed service providers.

• Preferred: experience in regulated sectors such as healthcare, pharmaceutical, MedTech, manufacturing, or similarly complex global environments.

• Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSK, or equivalent credentials are preferred.

🏝️ Benefits

• Consolidated retirement plan (pension).

• Savings plan (401(k)).

• Long-term incentive program.

• Vacation – 120 hours per calendar year.

• Sick time - 40 hours per calendar year; for employees residing in Colorado – 48 hours per calendar year; for employees residing in Washington – 56 hours per calendar year.

• Holiday pay, including Floating Holidays – 13 days per calendar year.

• Work, Personal, and Family Time - up to 40 hours per calendar year.

• Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child.

• Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year.

• Caregiver Leave – 80 hours in a 52-week rolling period.

• Volunteer Leave – 32 hours per calendar year.

• Military Spouse Time-Off – 80 hours per calendar year.