Cybersecurity M&A Technical Program Manager

Role: Cybersecurity M&A Technical Program Manager

Location: Remote

Type: Contract

About the Role:

• Client is in the business of better health, and we touch the lives of patients in virtually every aspect of healthcare. We partner with payors, hospitals, physician offices, pharmacies, pharmaceutical companies, and others across the spectrum of care to build healthier organizations that deliver better care to patients in every setting. Every single Client employee contributes to our mission—by joining Client you act as a catalyst in a chain of events that helps millions of people all over the globe.
• We are seeking a high-energy, results-driven Cybersecurity M&A Technical Program Manager to serve as the single point of accountability for end-to-end technology program delivery for divestitures and business separations. This role owns the full lifecycle from deal-stage planning and separation readiness through Day 1/close execution, TSA/Reverse TSA delivery, and post-close stabilization/exit, with a strong emphasis on cyber risk management (risk identification, control readiness, remediation tracking, and security sign-offs) and identity, infrastructure, application, and data separation workstreams.
• The ideal candidate is a proactive self-starter who anticipates issues before they surface, drives accountability across cross-functional teams, and knows when to roll up their sleeves on solutioning versus when to pull in the right subject matter experts.

Position Summary:

• The M&A Technical Program Manager is responsible for stewarding critical enterprise technology initiatives and driving the delivery of strategic and transformational change in support of divestitures and business separations.
• This role requires an individual who thrives in fast-paced, high-stakes environments—someone who operates with urgency, takes ownership end-to-end, and brings energy to every engagement.
• You will lead cross-functional dependencies across IT, Security, IAM, infrastructure, applications, data, and business functions; drive separation planning and execution; and ensure programs are delivered on time, within scope, and aligned with deal priorities, contractual obligations (e.g., TSA/Reverse TSA), and enterprise risk posture.
• Robust cyber risk management experience is required. You will partner closely with cybersecurity, risk, privacy, and compliance teams to identify and mitigate deal-related risks, drive remediation, and support security readiness and approvals.
• A background in enterprise infrastructure, IT operations, or IT service management is highly valued.

Key Responsibilities:

Divestiture Program Governance, Planning & Readiness — 25%

• Serve as the centralized single point of accountability for divestiture/separation technology delivery—owning governance, integrated plan, milestones, dependencies, and executive readiness reporting.
• Lead deal-stage separation planning: define scope and operating assumptions, establish Day 1/Day 2 requirements, align workstreams (apps, data, identity, network, end-user computing), and validate resource plans and timelines.
• Own the RAID log (risks, assumptions, issues, decisions) and proactively surface separation blockers (contractual, security, data sharing, connectivity, identity) before they impact close, Day 1, or TSA exit.

Divestiture & Separation Program Delivery — 35%

• Own end-to-end divestiture/separation execution across all technology workstreams, driving integrated delivery from planning through cutover, Day 1 operations, and Day 2 stabilization.
• Drive separation architecture and disentanglement activities (applications, data, identity, endpoints, network, and infrastructure), including data migration/retention, access removal, connectivity changes, and segmentation to achieve clean separation.
• Plan and execute cutover and Day 1 readiness; coordinate TSA/Reverse TSA scope, SLAs, milestones, service performance, governance, and exit plans across internal teams, the buyer, and third parties.

Cyber Risk Management & Security Readiness — 20%

• Partner with Cybersecurity, GRC, Privacy, and Legal to perform separation-focused cyber risk assessments (carve-out, data sharing, third-party connectivity, TSA/Reverse TSA services) and define actionable risk treatment plans.
• Drive security control readiness and remediation tracking across identity, endpoint, network, vulnerability management, logging/monitoring, and incident response requirements; ensure carve-out controls are in place before close/Day 1 and throughout TSA duration.
• Coordinate security reviews and approvals for separation designs, buyer connectivity, data transfer mechanisms, and TSA/Reverse TSA delivery; ensure risks, exceptions, and compensating controls are documented, owned, and closed.

IAM Separation & Access Governance — 10%

• Provide program management leadership for IAM separation initiatives (identity carve-out, access governance, SSO/MFA changes, privileged access, directory services disentanglement), ensuring timely access removal and clean boundary enforcement.
• Collaborate with IAM architects, engineers, and security teams to design and deliver separation-ready identity patterns (buyer connectivity, TSA identity services, account migrations) aligned with policy and audit expectations.
• Drive IAM separation governance, cutover readiness, risk assessment, and validation (access recertification, privileged access, service accounts) to support Day 1 security posture and TSA exit.

Technical Solutioning & Escalation — 5%

• Apply technical acumen to know when to personally drive solutioning versus when to engage architects, engineers, or SMEs—balancing speed with the right expertise at the right time.
• Provide expert guidance on infrastructure-related decisions, system integrations, and operational dependencies that impact program delivery.
• Lead escalation management, driving rapid resolution of blockers and cross-team dependencies.

Stakeholder Engagement & Reporting — 5%

• Foster strong relationships with business leaders, IT teams, vendors, and executive stakeholders, providing regular updates on program status, risks, and achievements.
• Deliver executive-level reporting on program KPIs, integration milestones, and delivery health across the portfolio.
• Champion tool and policy compliance, establish standards where no current standard exists, and drive continuous improvement across delivery processes.

Mindset & Energy:

• Go-getter with relentless drive — You don't wait for direction; you see what needs to be done and make it happen with urgency and accountability.
• High-powered energy — You bring intensity, enthusiasm, and momentum to every meeting, every deliverable, and every stakeholder interaction.
• Proactive & anticipatory — You pick up on signals before issues materialize. You're the person who flags risks at Monday's standup that the team doesn't see until Thursday.
• Self-starter — You thrive with autonomy, take ownership of ambiguous problems, and drive them to resolution without constant oversight.
• Aggressively customer-focused — You treat every internal stakeholder like a VIP client, delivering with speed, quality, and white-glove communication.

Core Competencies:

• Highly organized — Exceptional ability to manage multiple concurrent programs, workstreams, and stakeholders without dropping threads.
• Technical judgment — You understand when a problem requires deep solutioning and when it requires pulling in the right people—and you act accordingly.
• Integration mindset — You see the big picture across systems, teams, and processes and drive toward unified outcomes.
• Communication & influence — You communicate with clarity and confidence at all levels, from engineering teams to executive leadership.

Minimum Qualifications:

• 8+ years of progressive experience in technical program management, IT operations, or enterprise technology delivery.
• 5+ years of direct experience managing M&A integration and/or divestiture/separation workstreams (e.g., Day 1 readiness, cutover, TSA/Reverse TSA coordination, or separation execution).
• 5+ years of experience partnering with cybersecurity/GRC teams on cyber risk management (risk assessments, control readiness, remediation planning/tracking, and governance) within complex enterprise programs.
• 3+ years of experience with IAM programs (identity governance, access management, SSO, MFA, PAM, directory services), including M&A-related integrations and separations.
• Proven track record of serving as a single point of accountability for complex, cross-functional programs from demand intake through delivery.
• Demonstrated ability to manage centralized demand pipelines, prioritization frameworks, and delivery execution in a matrixed environment.
• Bachelor's degree in Information Technology, Computer Science, Business Management, Engineering, or a related field (or equivalent experience).

Preferred Qualifications:

• Hands-on experience with divestiture execution, TSA/Reverse TSA governance, and separation planning (apps, data, identity, network, and infrastructure).
• Familiarity with enterprise tools such as ServiceNow, Jira, Smartsheet, Planview, or similar portfolio/project management platforms.
• Experience with ITIL, Agile/Scrum, or Kanban delivery methodologies.
• PMP, PgMP, or SAFe certification.
• Familiarity with security governance and control frameworks (e.g., NIST CSF/800-53, ISO 27001, SOC 2) and translating control requirements into executable program plans.
• Experience working in healthcare, pharmaceutical, or regulated industries.
• MBA or advanced degree preferred.