Mergers & Acquisitions (M\&A) Specialist – Cybersecurity
Ewing, NJ / Remote
Full-Time Permanent
Job Description
Must Have Technical/Functional Skills
• 5+ years of experience in M\&A, cybersecurity, technology due diligence, or corporate development.
• Solid understanding of cybersecurity frameworks (NIST CSF, ISO 27001, CIS).
• Experience delivering cybersecurity risk assessments in deals or technical environments.
Strong analytical, financial, and communication skills.
Roles & Responsibilities
M\&A Strategy & Deal Support
• Support the full M\&A lifecycle: sourcing, evaluation, due diligence, negotiation, and post merger integration.
• Perform financial, operational, technology, and strategic assessments of target companies.
• Collaborating with Corporate Development, Legal, Finance, and Business Unit leads on deal structuring.
Cybersecurity Due Diligence:
• Conduct cybersecurity risk assessments on potential acquisition targets.
• Evaluate maturity of information security programs (NIST, ISO 27001, SOC2, CIS).
• Identify vulnerabilities, data exposure risks, breach history, and technology gaps.
• Assess compliance with U.S. regulations (e.g., HIPAA, FDA cybersecurity guidelines, FTC, state privacy laws).
• Recommend risk mitigation strategies and cost estimates for remediation.
Technology & Data Risk Evaluation
• Assess target’s IT architecture, cloud posture, identity management, data governance, and DevSecOps practices.
• Evaluate third party risk, vendor dependencies, and software supply chain security.
• Identify integration challenges early in deal stages.
Post Merger Integration (PMI)
• Develop and execute cybersecurity integration plans.
• Work with IT, Security, and Business teams to align policies, tools, and processes.
• Monitor remediation activities and ensure adherence to corporate cyber standards.