Senior Manager, Cybersecurity-Carveout

Overview

Are you ready to make an impact? West Monroe is excited to hire a Cybersecurity – Senior Manager to lead carveout, merger integration, and other post-close M&A projects with a focus on high-velocity cybersecurity program standups and transformations. The senior manager will often lead consulting teams in developing and implementing cybersecurity carveout and/or integration plans, including cybersecurity architecture/design, process & policy creation, security controls implementation, governance/risk/compliance (GRC) standup, resiliency planning, application & cloud security, and tools/vendor selection and deployment.

This role will also help clients with cybersecurity organization design, resource planning, and total cost of ownership (TCO)/cost modeling to determine the one-time and recurring investments needed to transition to and sustain new standalone and/or integrated security programs. This is an exciting opportunity to join a high-growth firm trusted by the nation’s leading private equity sponsors to provide cybersecurity advisory, execution, and leadership for complex carveout and integration transactions.

• Act as Cybersecurity Lead on client engagements involving carveout-to-standalone, carveout-to-integration, merger integration, and other M&A transactions
• Roadmap and develop robust cybersecurity programs through the lens of cyber resiliency, including leading discovery and solutioning workshops, assessing the cybersecurity operating model environment (people, processes, and technology), and developing estimates for one-time transition costs and go-forward operating model (run rate investments)
• Provide strategic cybersecurity advisory, due diligence, and transformation services ranging from policy definition to controls implementation, tool selection, and overall program build and adoption
• Introduce cybersecurity controls to newly formed and/or merged organizations with the goal of mitigating the chance of ransomware attacks or other security incidents
• Lead transaction execution initiatives as part of defined cybersecurity roadmaps, including Day 1 readiness and longer-term transition projects, interfacing with all levels of management and personnel internally and at client organization
• Position security initiatives to build or drive maturity to clients’ cybersecurity programs, recommending remediation and improvements for key security domains such as Identity, Data, Cloud, Sec Ops, AI, etc.
• Manage relationships with Private Equity executives and other industry client contacts to determine project requirements and provide status updates; translate requirements into concrete proposals, including detailed work plans and cost estimates
• Lead consultants on engagements, delegate work streams, and act as career advisor/mentor
• Assist with and/or lead business development efforts, including SOW development and identifying potential new client pursuits
• Contribute to practice development by mentoring junior consultants on best practices, staying abreast of industry trends, creating reusable methodologies, and offering expertise to the Cybersecurity practice and discipline

• Bachelor’s degree in relevant field preferred, or equivalent experience required
• Consulting firm/industry experience preferred, in particular familiarity with cybersecurity carveout, merger integration, and other post-close transaction M&A-related project dynamics
• 8-12+ years of experience in cybersecurity leading complex projects in a fast-paced environment with broad knowledge of various security domains as it applies to carveout and merger integration M&A transactions: security architecture, GRC, controls deployment, incident response planning, cloud security, application security, data privacy, threat intelligence, etc.
• Adept at leading cybersecurity risk & controls assessments using frameworks such as NIST CSF or ISO/IEC 27001
• Experience with MSP and MSSP services strongly preferred
• Knowledge of various security compliance and privacy frameworks: PCI DSS, HIPAA, HITRUST, FedRAMP, GDPR, CCPA, CMMC, etc.
• Experience project managing and delivering end-to-end solutions: people management,…