Cybersecurity & Compliance M&A Advisor

West Monroe is looking for a Cybersecurity & Compliance Advisor (Consultant) to join our Technology Transaction Services-TTS practice and focus on IT security due diligence for client M&A transactions. The advisor will often interview target company stakeholders to understand their cybersecurity environment (technology, processes, personnel), identify issues for remediation, and present summary findings to client executives. This is an exciting opportunity to work within our industry-leading technology M&A practice and deliver cybersecurity assessments that are factored into client M&A decision-making.

Responsibilities:

• Collaborate with TTS consultants from other competencies (Cloud, Software, Data), contributing cybersecurity expertise to produce holistic IT due diligence assessments to be factored into client M&A activity
• Manage client relationships and meet with executives to determine project requirements and provide status updates; translate requirements into concrete projects proposals, including detailed work plans and cost estimates
• Provide strategic cybersecurity advisory and compliance consulting services for enterprise clients, ranging from security risk assessments to personnel suggestions and policy definition/adoption
• Document current-state review of existing security organization(s), including their controls, processes, and technologies, to deliver key findings and recommendations to executives
• Manage junior consultants on projects, delegate workstreams, and act as career advisor/mentor
• Promote thought leadership in emerging cybersecurity technologies and consulting tactics through activities like blogs, white papers, attending industry events, and Center of Excellence contributions
• Contribute to business development process ad hoc and look for opportunities to cross-sell solutions
• Actively build a professional and affiliate network in the consulting, cybersecurity, M&A, and/or broader technology communities

Qualifications:

• Bachelor’s degree in relevant field preferred, or equivalent experience required
• Consulting firm/industry experience preferred
• 4-12+ years of experience in cybersecurity, information security, and/or technology M&A
• Strong experience working with risk/compliance/privacy regulatory frameworks: NIST, PCI-DSS, HIPAA, HITRUST, SOC 1/SOC 2, GDPR, CCPA, SOX, ISO, CMMC, etc.
• Preference for broad background in IT security, I.e., incident response, threat hunting, network security, cloud security, application security, risk & compliance, strategy & operations, etc.
• Confident in conveying complex cybersecurity concepts to both technical & non-technical audiences
• Excellent verbal, presentation/facilitation, and written communication skills
• Comfortable working on fast-paced projects across diverse industries
• Willingness to travel for out of town client engagements – COVID-19 permitting
• Bonus – application security, cloud security- AWS/Azure, certifications- CISSP/CISM/CISA/PCI-QSA

#LI-HYBRID