A&D Pre-Close Security Director

This is a fully remote position, open to applicants in Alabama, +44 more states.

📋 Description

• Define, govern, and enhance the enterprise cybersecurity strategy for pre-close mergers, acquisitions, divestitures, licensing arrangements, minority investments, and strategic partnerships.

• Provide executive leadership and oversight for cybersecurity due diligence, transaction risk management, deal security governance, and readiness for integration or separation.

• Collaborate with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM owners, business technology leaders, transaction teams, and senior executives.

• Establish and manage the pre-close cybersecurity strategy, operating model, decision framework, standards, and escalation processes.

• Lead the enterprise cybersecurity due diligence program, which includes assessment methods, evidence requirements, regulatory and control criteria, reporting standards, and quality expectations.

• Assess cyber risks, incidents, regulatory exposure, control gaps, architectural choices, technology dependencies, and remediation obligations.

• Advise transaction sponsors on risk acceptance, contractual protections, closing conditions, security-by-design mandates, Day 1 priorities, and post-close commitments.

• Convert diligence findings and enterprise requirements into Day 1 objectives, minimum controls, transition assumptions, TSA considerations, dependency tracking, and handoff requirements.

• Oversee the global pre-close transaction portfolio, prioritizing resources based on deal value, threat, complexity, regulatory impact, and timing.

• Communicate findings, regulatory implications, recommendations, residual risk, decisions, and business impacts to executives, governance boards, steering committees, and transaction sponsors.

• Standardize intake processes, questionnaires, risk taxonomies, scoring mechanisms, evidence, dashboards, metrics, templates, and workflow automation.

• Lead and mentor managers, cybersecurity professionals, deal leads, and cross-functional contributors.

⛳️ Requirements

• Bachelor’s degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related field.

• 12+ years of progressive experience in cybersecurity, information risk management, technology leadership, M&A transaction support, integration or separation, or related fields.

• Proven experience leading cybersecurity initiatives that support acquisitions, divestitures, licensing, minority investments, strategic partnerships, or other complex business transactions.

• In-depth understanding of regulatory and compliance requirements.

• Extensive technical knowledge across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, security operations, incident response, third-party risk, privacy, and cyber resilience.

• Ability to troubleshoot intricate cybersecurity and technology issues at the Director level and make informed risk decisions.

• Experience aligning enterprise security requirements with transaction constraints, policies, standards, control objectives, and exception processes.

• Proven ability to influence executives and drive cross-functional initiatives within highly matrixed, global environments.

• Strong knowledge of NIST Cybersecurity Framework, ISO 27001, NIST 800-series publications, GDPR, HIPAA, and other relevant requirements.

• Experience managing portfolios that involve concurrent deals, assessments, or workstreams, vendors, senior stakeholders, dependencies, and time-sensitive decisions.

• Exceptional communication and presentation skills for executive-level interaction.

• Ability to navigate ambiguity, maintain transaction confidentiality, facilitate organizational change, and enhance repeatability through data, tools, automation, and governance.

• Advanced degree (MBA, MS, or equivalent) is preferred.

• Preferred experience with A&D cybersecurity playbooks, questionnaires, control libraries, risk-scoring methods, RACI models, handoff criteria, and phase-based transaction standards.

• Preferred experience in designing automation for intake, evidence collection, risk reporting, workflow orchestration, dashboards, and portfolio governance.

• Preferred experience collaborating with Corporate Development, Legal, Privacy, Finance, Technology Services, business technology teams, IMO/SMO functions, external advisors, and managed service providers.

• Experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, or similarly complex global environments is preferred.

• Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSK, or equivalent credentials are preferred.

🏝️ Benefits

• Participation in the Company’s consolidated retirement plan (pension).

• Savings plan (401(k)).

• Long-term incentive program.

• Vacation – 120 hours per calendar year.

• Sick time – 40 hours per calendar year; 48 hours for employees residing in Colorado; 56 hours for employees residing in Washington.

• Holiday pay, including Floating Holidays – 13 days per calendar year.

• Work, Personal and Family Time – up to 40 hours per calendar year.

• Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child.

• Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year.

• Caregiver Leave – 80 hours in a 52-week rolling period.

• Volunteer Leave – 32 hours per calendar year.

• Military Spouse Time-Off – 80 hours per calendar year.