Are you passionate about helping organizations navigate acquisitions, divestitures, carve-outs, and strategic investments from a Cyber Security perspective? We are looking for a Cyber Security Risk & Due Diligence professional to join a global team supporting strategic corporate transactions and helping decision-makers understand cyber risks before, during, and after a deal. This position combines Cyber Security, M&A;, Due Diligence, Risk Advisory, and Project Management within a highly international environment. Your Mission As the Cyber Security lead within M&A; transactions, you will evaluate the cyber risk exposure of acquisition targets, businesses being divested, joint ventures, and strategic investments. You will work closely with Corporate M&A;, Legal, Data Privacy, IT, Business Leaders, external advisors, and Cyber Security SMEs to ensure cyber risks are properly assessed, understood, and managed throughout the transaction lifecycle. Key Responsibilities Lead Cyber Security Due Diligence workstreams during acquisitions, investments, divestitures, and carve-outs. Assess the security maturity and cyber posture of target organizations. Review infrastructure, cloud environments, applications, data, identity management, OT environments, third-party relationships, and security governance frameworks. Identify transaction-related cyber risks and evaluate their potential operational, financial, contractual, and regulatory impact. Translate technical findings into executive-level risk reports and recommendations. Support transaction negotiations by providing cyber risk insights to decision-makers. Define and track remediation plans and risk mitigation actions. Support Day-1 Readiness, Transition Service Agreements (TSAs), integration planning, separation planning, and Post-Merger Audit activities.



Coordinate internal Cyber Security experts and external advisors across multiple regions. Adecuado Background We are particularly interested in professionals coming from: Technology Risk Advisory Transaction Services M&A; Consulting Cyber Security Consulting Must-Have Requirements Experience in Cyber Security Governance, Risk & Compliance (GRC), Cyber Risk Management or Technology Risk. Experience conducting Cyber Security Risk Assessments and risk remediation activities. Previous exposure to M&A; transactions, acquisitions, divestitures, carve-outs, integrations, separations, or Due Diligence environments. Experience preparing executive-level risk assessments and reports. Ability to explain technical Cyber Security findings in business language. Experience interacting with senior executives and decision-makers. Strongly Preferred M&A; Integration or Separation experience. Carve-out projects. Transition Service Agreements (TSA). Technology Risk Advisory experience within a consulting environment. Experience assessing target companies before acquisitions. Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor. Why Join? Work on strategic global transactions. Direct exposure to executive stakeholders and corporate decision-making. Influence investments, acquisitions, and divestitures from a Cyber Security perspective. Combine Cyber Security expertise with business strategy and M&A.; International and multicultural environment. Flexible hybrid working model. Keywords Cyber Due Diligence | M&A; Cyber Security | Transaction Services | Technology Risk | Cyber Advisory | Risk Advisory | Carve-Out | Divestiture | Acquisition | Post-Merger Integration | TSA | Cyber Risk Management | Information Security | GRC | Corporate Development | ISO 27001 | NIST | Third-Party Risk | Cyber Assessment #J-18808-Ljbffr

📌 Cyber Security Risk Manager (Madrid)
🏢 Tenth Revolution Group
📍 Madrid