Cybersecurity Architect - Mergers & Acquisitions

Description

The company's Information Security group supports business development at every stage of a company relationship, from research sharing to acquisition, and gives advisory services that lower risk and technical friction in those deals.

This is a Security Architect role with M&A experience, sitting in the Information Security and Risk Management security architecture team. You will work across operational and strategic levels, coordinating design and advisory work with other information security areas on individual acquisitions and research ventures.

You will work with research, business intelligence, technical, and information security colleagues to build and deliver security products and services. You will help shape the program's services and make sure acquisitions in progress get the right security support at the right time.

The role has a dotted-line relationship with the cybersecurity threat intelligence team.

Responsibilities

• Act as the main point of contact between security, technical, and business teams.
• Coordinate core security and technology services with infrastructure, technology, security, and target company teams during an acquisition or divestiture.
• Design, document, and roll out secure design patterns for work with strategic alliance partners, together with infrastructure, technology, and security teams.
• Work with internal security and technical teams to create new playbooks and services for business alliances and strategic acquisitions.

Requirements

• Required: a Bachelor's degree with 7 years of experience, a Master's degree with 6 years of experience, or a PhD with 2 years of experience.
• Required: hands-on experience in a security architecture discipline such as cloud security, AppSec, network security, identity, or operational technology, with solutions you have designed and successfully implemented that you can explain.
• Required: direct experience designing and/or delivering solutions for mergers, acquisitions, divestitures, or collaborations between multiple companies.
• Required: working knowledge of AWS, GCP, and Azure and their security solutions, plus M365 and Slack.
• Required: working knowledge of Active Directory and its security concepts, including domains, forests, and trusts.
• Required: a solid understanding of industry security standards such as NIST 800 and ISO 27001.
• Preferred: 5 years of experience in an information security role, ideally as a Security Architect or Security Engineer.
• Preferred: experience with a range of security tools and capabilities, ideally with hands-on operational work in self-hosted and cloud environments.
• Preferred: GCFE, GCFA, GDSA, GCTI, GCIA, GCDA, or GEIR certifications are strongly preferred.
• Preferred: related technical or industry certifications such as SANS or AWS.

Conditions

This role can be fully remote from anywhere in the U.S.

Where state or local law requires pay disclosure, the base pay range the company expects to pay for this grade is shared. Actual pay depends on factors such as location and may fall above or below the range, and the range may change.

The role is eligible for long-term incentive programs. Bonuses, incentives, and other compensation remain at the company's discretion until paid and may change, consistent with applicable law.

Open to applicants in the US and Puerto Rico only. The company is an equal opportunity employer and welcomes veterans and people with disabilities.

Benefits

• Paid time off covering vacation, holidays, and sick leave.
• Medical, dental, and vision insurance, plus a 401(k), for eligible employees.
• Eligibility for long-term incentive programs.