Cybersecurity - Senior Manager (M&A/Carveout)

West Monroe is excited to hire a Cybersecurity – Senior Manager to lead carveout and other post-close M&A projects with a focus on building out new IT security programs from the ground up. The senior manager will often lead consulting teams in developing cybersecurity roadmaps for divested entities, including process & policy creation, security controls implementation, risk & compliance advisory, resiliency planning, application & cloud security, and tools/vendor selection. This is an exciting opportunity to join a high-growth firm and play a lead role in architecting robust cybersecurity programs for newly established companies across a variety of industries.

Responsibilities:

• Act as Cybersecurity Approach & Planning Lead on client engagements involving carveouts and/or post-close M&A integrations
• Roadmap and develop robust cybersecurity programs through the lens of resiliency
• Provide strategic cybersecurity advisory, due diligence, and transformation services ranging from policy definition to controls implementation, tool selection, and overall program adoption
• Introduce IT security controls to newly formed organizations with the goal of mitigating the chance of ransomware attacks or similar incidents
• Manage relationships with Private Equity executives and other industry client contacts to determine project requirements and provide status updates; translate requirements into concrete proposals, including detailed work plans and cost estimates
• Lead consultants on engagements, delegate workstreams, and act as career advisor/mentor
• Assist with and/or lead business development efforts, including SOW development and identifying potential new client pursuits
• Contribute to practice development by mentoring junior consultants on best practices, staying abreast of industry trends, creating reusable methodologies, and offering expertise to the Cybersecurity Center of Excellence

Qualifications:

• Bachelor’s degree in relevant field preferred, or equivalent experience required
• Consulting firm/industry experience preferred
• 10-15+ years of experience in cybersecurity with broad knowledge of various domains: security architecture, risk & compliance, controls auditing, incident response planning, cloud security, application security, data privacy, threat intelligence, etc.
• Adept at leading cybersecurity risk & controls assessments using frameworks such as NIST CSF or ISO/IEC 27001
• Knowledge of various regulatory compliance and privacy frameworks: PCI-DSS, HIPAA, HITRUST, FedRAMP, GDPR, CCPA, etc.
• Experience project managing and delivering end-to-end solutions: people management, strategy/roadmap development, design/architecture, implementation, change management, etc.
• Confident in conveying complex cybersecurity concepts to executive client stakeholders
• Excellent verbal, presentation/facilitation, and written communication skills
• Willingness to travel for client engagements (~15-20% per year on average)

#LI-HYBRID​