Cybersecurity Architect - Mergers & Acquisitions

Description

The Security Architecture team sits within the Information Security and Risk Management group. The company's Information Security group works with business development from the first stage of a partner relationship through to acquisition, whether that is a research-sharing arrangement or a full deal. It provides advisory work that aims to reduce both risk and technical friction in these transactions.

This is a Security Architect role focused on mergers and acquisitions. You will be the main point of contact between security, technical and business teams, working at both operational and strategic levels. You will shape and coordinate design and advice across the security group for individual acquisitions and research ventures, and help develop the services the program delivers. You will also make sure acquisitions in progress receive the right security services at the right time.

You will work with internal research and business intelligence teams, technical teams and other security group members to build and deliver security products and services. The role sits in the security architecture team, with a dotted-line reporting relationship to the cybersecurity threat intelligence team.

Responsibilities

• Coordinate core security and technology services with infrastructure, technology, security and target company teams during an acquisition or divestiture.
• Develop, document and deploy secure design patterns for work with strategic alliance partners, together with infrastructure, technology and security teams.
• Work with internal security and technical teams to create new security playbooks and services for business alliances and strategic acquisitions.

Requirements

• Required: A bachelor's degree plus 7 years of experience, or a master's degree plus 6 years, or a PhD plus 2 years.
• Required: Hands-on experience in a relevant area of security architecture, such as cloud security, application security, network security, identity or operational technology, with practical solutions you have designed and successfully implemented that you can explain.
• Required: Direct experience designing and/or delivering solutions for mergers, acquisitions, divestitures or multi-company collaborations.
• Required: Working knowledge of major cloud platforms and their security solutions (AWS, GCP, Azure) and collaboration platforms (M365, Slack).
• Required: Working knowledge of Active Directory and its security concepts, such as domains, forests and trusts.
• Required: A solid grasp of industry security standards such as NIST 800 and ISO 27001.
• Preferred: 5 years of experience in an information security role, ideally as a Security Architect or Security Engineer.
• Preferred: Experience with a range of security tools and capabilities, ideally with some hands-on or operational work, in self-hosted and cloud environments.
• Preferred: GCFE, GCFA, GDSA, GCTI, GCIA, GCDA and GEIR certifications, which are strongly preferred.
• Preferred: Other relevant technical or industry certifications, such as SANS or AWS.

Conditions

Open to applicants in the US and Puerto Rico only.

The role can be fully remote from anywhere in the US.

Where pay disclosure laws under state or local law apply, the company will post a base pay range it believes in good faith it will pay for the role. Actual pay within that range depends on factors including location, and may fall above or below it. The range may change over time.

Any bonus, commission, incentive or other compensation or benefit is at the company's sole discretion until paid, and may be changed in line with applicable law.

The company is an equal opportunity employer and welcomes applicants regardless of veteran or disability status.

Benefits

• Paid time off covering vacation, holidays and sick leave.
• Medical, dental and vision insurance, plus a 401(k), for eligible employees.
• Eligibility for the company's long-term incentive programs.