Are you passionate about helping organizations navigate acquisitions, divestitures, carve-outs, and strategic investments from a Cyber Security perspective?

We are looking for a Cyber Security Risk & Due Diligence professional to join a global team supporting strategic corporate transactions and helping decision-makers understand cyber risks before, during, and after a deal.

This position combines Cyber Security, M&A;, Due Diligence, Risk Advisory, and Project Management within a highly international environment.

Your Mission

As the Cyber Security lead within M&A; transactions, you will evaluate the cyber risk exposure of acquisition targets, businesses being divested, joint ventures, and strategic investments.

You will work closely with Corporate M&A;, Legal, Data Privacy, IT, Business Leaders, external advisors, and Cyber Security SMEs to ensure cyber risks are properly assessed, understood, and managed throughout the transaction lifecycle.

Key Responsibilities

- Lead Cyber Security Due Diligence workstreams during acquisitions, investments, divestitures, and carve-outs.
- Assess the security maturity and cyber posture of target organizations.
- Review infrastructure, cloud environments, applications, data, identity management, OT environments, third-party relationships, and security governance frameworks.
- Identify transaction-related cyber risks and evaluate their potential operational, financial, contractual, and regulatory impact.
- Translate technical findings into executive-level risk reports and recommendations.
- Support transaction negotiations by providing cyber risk insights to decision-makers.
- Define and track remediation plans and risk mitigation actions.
- Support Day-1 Readiness, Transition Service Agreements (TSAs), integration planning, separation planning, and Post-Merger Audit activities.




- Coordinate internal Cyber Security experts and external advisors across multiple regions.

Ideal Background

We are particularly interested in professionals coming from:

- Technology Risk Advisory
- Transaction Services
- M&A; Consulting
- Cyber Security Consulting

Must-Have Requirements

- Experience in Cyber Security Governance, Risk & Compliance (GRC), Cyber Risk Management or Technology Risk.
- Experience conducting Cyber Security Risk Assessments and risk remediation activities.
- Previous exposure to M&A; transactions, acquisitions, divestitures, carve-outs, integrations, separations, or Due Diligence environments.
- Experience preparing executive-level risk assessments and reports.
- Ability to explain technical Cyber Security findings in business language.
- Experience interacting with senior executives and decision-makers.

Strongly Preferred

- M&A; Integration or Separation experience.
- Carve-out projects.
- Transition Service Agreements (TSA).
- Technology Risk Advisory experience within a consulting environment.
- Experience assessing target companies before acquisitions.
- Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor.

Why Join?

- Work on strategic integral transactions.
- Direct exposure to executive stakeholders and corporate decision-making.
- Influence investments, acquisitions, and divestitures from a Cyber Security perspective.
- Combine Cyber Security expertise with business strategy and M&A.;
- International and multicultural environment.
- Flexible hybrid working model.

Keywords

Cyber Due Diligence | M&A; Cyber Security | Transaction Services | Technology Risk | Cyber Advisory | Risk Advisory | Carve-Out | Divestiture | Acquisition | Post-Merger Integration | TSA | Cyber Risk Management | Information Security | GRC | Corporate Development | ISO 27001 | NIST | Third-Party Risk | Cyber Assessment

#J-18808-Ljbffr

📌 Cyber Security Risk Manager (Madrid)
🏢 Tenth Revolution Group
📍 Madrid