Cybersecurity - Senior Manager (M&A/Carveout)

West Monroe is excited to hire a Cybersecurity – Senior Manager to lead carveout and other post-close M&A projects with a focus on building out new IT security programs from the ground up. The senior manager will often lead consulting teams in developing cybersecurity roadmaps for divested entities, including cybersecurity architecture/design, process & policy creation, security controls implementation, governance/risk management/compliance (GRC) advisory, resiliency planning, application & cloud security, and tools/vendor selection. This role will also help clients with cybersecurity organization design, resource planning, and total cost of ownership (TCO)/cost modeling to understand the one-time and recurring investments needed to transition to and sustain the new security program. This is an exciting opportunity to join a high-growth firm and play a lead role in architecting robust cybersecurity programs for newly established companies across a variety of industries.

Responsibilities:

• Act as Cybersecurity Lead on client engagements involving carveout-to-standalone, carveout-to-integration, merger integration, and other M&A transactions
• Roadmap and develop robust cybersecurity programs through the lens of cyber resiliency, including leading discovery and solutioning workshops, assessing the cybersecurity operating model environment (people, processes, and technology), and developing estimates for one-time transition costs and go-forward operating model (run rate investments)
• Provide strategic cybersecurity advisory, due diligence, and transformation services ranging from policy definition to controls implementation, tool selection, and overall program adoption
• Introduce IT security controls to newly formed organizations with the goal of mitigating the chance of ransomware attacks or similar incidents
• Lead transaction execution initiatives as part of defined cybersecurity roadmaps, including Day 1 readiness and longer-term transition projects, interfacing will all levels of management and personnel internally and at client organization
• Manage relationships with Private Equity executives and other industry client contacts to determine project requirements and provide status updates; translate requirements into concrete proposals, including detailed work plans and cost estimates
• Lead consultants on engagements, delegate workstreams, and act as career advisor/mentor
• Assist with and/or lead business development efforts, including SOW development and identifying potential new client pursuits
• Contribute to practice development by mentoring junior consultants on best practices, staying abreast of industry trends, creating reusable methodologies, and offering expertise to the Cybersecurity Center of Excellence

Qualifications:

• Bachelor’s degree in relevant field preferred, or equivalent experience required
• Consulting firm/industry experience preferred
• 10-15+ years of experience in cybersecurity with broad knowledge of various domains: security architecture, risk & compliance, controls auditing, incident response planning, cloud security, application security, data privacy, threat intelligence, etc.
• Adept at leading cybersecurity risk & controls assessments using frameworks such as NIST CSF or ISO/IEC 27001
• Knowledge of various regulatory compliance and privacy frameworks: PCI-DSS, HIPAA, HITRUST, FedRAMP, GDPR, CCPA, etc.
• Experience project managing and delivering end-to-end solutions: people management, strategy/roadmap development, design/architecture, implementation, change management, etc.
• Knowledge of cybersecurity products and services landscape, including leading providers across key security domains (e.g., Managed Detection & Response (MDR))
• Confident in conveying complex cybersecurity concepts to executive client stakeholders
• Excellent verbal, presentation/facilitation, and written communication skills
• Willingness to travel for client engagements (~15-20% per year on average)

#LI-HYBRID​