Senior Manager, Pre-Close Security

This is a fully remote position, open to applicants in Alabama, +45 more states.

📋 Description

• Act as the main cybersecurity lead for ISRM A&D regarding assigned transactions.

• Organize diligence activities, assessment timelines, documentation needs, and evidence requirements for deal teams and leadership.

• Assess target environments encompassing security architecture, identity, network, endpoint, cloud, application security, data protection, vulnerability management, incident response, third-party risk, and cyber resilience.

• Oversee the review of questionnaires, preparation for management meetings, coordination of outside-in assessments, analysis of documentation, follow-up inquiries, engagement with advisors, and consolidation of evidence.

• Convert technical findings into actionable recommendations related to risk acceptance, contractual protections, closing conditions, Day 1 priorities, remediation costs, integration dependencies, and post-close commitments.

• Collaborate with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM owners, business technology teams, external advisors, and deal sponsors.

• Elevate significant risk issues through the Director and relevant governance channels.

• Transform diligence findings into Day 1 objectives, minimum security expectations, TSA considerations, risk register entries, dependency tracking, and handoff documentation.

• Enhance diligence playbooks, questionnaires, risk taxonomies, scoring methodologies, templates, dashboards, reporting routines, intake workflows, and evidence standards.

• Mentor managers, analysts, advisors, and cross-functional contributors while fostering accountability, sharing lessons learned, and ensuring consistent A&D cybersecurity practices.

⛳️ Requirements

• A bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related field.

• Over 8 years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related fields.

• Proven experience in leading or significantly supporting cybersecurity due diligence, acquisition assessments, divestiture evaluations, third-party security reviews, or complex risk assessments in fast-paced business settings.

• Strong technical expertise across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, incident response, logging and monitoring, third-party risk, and cyber resilience.

• Ability to analyze incomplete diligence evidence, identify risk themes, formulate effective follow-up questions, clarify technical ambiguities, and differentiate material transaction risks from standard operational findings.

• Experience in translating technical cybersecurity insights into business-oriented recommendations, risk narratives, remediation priorities, Day 1 considerations, contractual inputs, and post-close handoff requirements.

• Familiarity with privacy, legal, regulatory, and enterprise security obligations relevant to regulated global environments.

• Knowledge of the NIST Cybersecurity Framework, ISO 27001, NIST 800-series publications, GDPR, HIPAA, and other applicable regulations.

• Experience in managing multiple workstreams, stakeholders, vendors, advisors, and deadlines across simultaneous deals or complex programs.

• Exceptional written and verbal communication skills for both technical and non-technical audiences.

• Capacity to operate with confidentiality, urgency, sound judgment, and professionalism in ambiguous, high-pressure transaction environments.

• An advanced degree (MBA, MS, or equivalent) is preferred.

• Preferred experience as a cybersecurity Deal Lead or workstream lead for acquisitions, divestitures, licensing transactions, minority investments, strategic partnerships, or joint ventures.

• Preferred experience in creating or managing A&D cybersecurity diligence playbooks, questionnaires, control libraries, risk-scoring methods, issue logs, decision records, RACI models, and handoff criteria.

• Preferred experience in conducting outside-in cyber assessments, threat exposure reviews, breach history analyses, vendor risk assessments, or technical architecture evaluations.

• Preferred experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, life sciences, or similarly complex global environments.

• Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSP, CCSK, or equivalent credentials are preferred.

🏝️ Benefits

• Retirement plan (pension).

• Savings plan (401(k)).

• Vacation – 120 hours per calendar year.

• Sick time – 40 hours per calendar year; 48 hours per calendar year for employees residing in Colorado; 56 hours per calendar year for employees residing in Washington.

• Holiday pay, including Floating Holidays – 13 days per calendar year.

• Work, Personal and Family Time – up to 40 hours per calendar year.

• Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child.

• Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year.

• Caregiver Leave – 80 hours in a 52-week rolling period.

• Volunteer Leave – 32 hours per calendar year.

• Military Spouse Time-Off – 80 hours per calendar year.

• Remote work options may be considered on a case-by-case basis, subject to approval by the Company.