Senior Director, Secure MA&D

About This Opportunity

We are representing a confidential healthcare organization in their search for a Senior Director to lead cybersecurity across mergers, acquisitions, divestitures, and strategic transactions. This is a high-impact role at the intersection of cyber risk, corporate development, and enterprise growth. You will own the full transaction lifecycle—from pre-close due diligence through Day 1 readiness and post-close integration—serving as the single accountable security leader to executive stakeholders, Finance, Legal, and the Board.

Our client operates in a highly regulated environment where transaction security findings directly affect valuation, deal structure, and closing conditions. You will lead a global team, establish governance frameworks, and drive the organizational change required to bring acquired entities onto enterprise security standards while balancing speed and defensible risk coverage.

Responsibilities

• Own and evolve the enterprise strategy, operating model, and capability roadmap for secure M&A and divestitures, including due diligence, Day 1 controls, integration, and separation
• Establish governance, decision rights, and risk thresholds that determine when cyber findings are deal-impacting versus post-close remediation items
• Lead, coach, and develop a global team of principals and analysts; manage third-party diligence and integration partners end to end
• Direct pre-close cybersecurity due diligence under compressed timelines, restricted access, and clean-team constraints, drawing defensible conclusions from incomplete evidence
• Quantify and defend remediation, integration, and run-rate cost estimates within deal models, ensuring cyber findings are reflected in purchase agreements, indemnity terms, and closing conditions
• Define security requirements for Transition Service Agreements, direct separation planning for divestitures, and ensure Day 1 readiness including minimum viable controls and incident response coverage
• Serve as the security voice in deal committee, investment committee, and Board-level materials, translating technical findings into valuation, timing, compliance, and operational impact
• Ensure diligence and integration address regulatory exposure including HIPAA, GxP, DSCSA, PCI DSS, SOX IT controls, GDPR, and cross-border data transfer requirements
• Lead organizational change to bring acquired entities onto enterprise security standards, including policy adoption, control sequencing, and tooling migration
• Aggregate inherited cyber risk across the transaction portfolio and report exposure trends to executive risk committees

What We're Looking For

• Bachelor's degree required; advanced degree in business or technical discipline preferred
• 15+ years of progressive experience in cybersecurity, technology risk, or security consulting, including 5+ years leading teams and enterprise-scale programs
• Demonstrated experience leading cybersecurity due diligence and integration across multiple completed transactions, including at least one carve-out, divestiture, or separation
• Working fluency in deal mechanics and terminology: letters of intent, data-room protocols, SPA and TSA constructs, purchase price adjustments, escrow, indemnity, and representations and warranties insurance
• Financial acumen to build, defend, and negotiate multi-year remediation and run-rate cost estimates with Finance and Corporate Development
• Breadth and depth across core security domains: identity and access management, cloud and network security, endpoint, data protection, application security, SOC and incident response, vulnerability management, GRC, and third-party risk
• Experience in a highly regulated industry; healthcare, pharmaceutical distribution, life sciences, or medical technology strongly preferred, with working knowledge of HIPAA, GxP, DSCSA, SOX, PCI DSS, and GDPR
• Familiarity with NIST CSF, NIST SP 800-53 and 800-171, ISO 27001, CIS Controls, and HITRUST as diligence and integration baselines
• Proven vendor management and budget ownership, including managing external assessment partners against fixed timelines and quality expectations
• Exceptional written and verbal communication skills, including Board and deal-committee materials, with a track record of being decisive on incomplete information
• Proven discretion in handling material non-public information and simultaneous confidential transactions, with clear understanding of insider-trading and information-barrier obligations
• Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSP, or PMP preferred
• Willingness to travel and support compressed transaction timelines, including nonstandard hours and multiple time zones

How We Work With You

Candidates apply directly through Get A Job.ai. Our talent team conducts an initial screening to understand your background, motivations, and fit for the role. We then submit qualified candidates to our client for consideration. Please do not contact the employer directly—all communication and coordination will flow through Get A Job.ai to protect confidentiality and ensure a smooth process for everyone involved.

Pay

Compensation details will be discussed during the screening process and are competitive with the market for this level of responsibility and expertise.

Equal Employment Opportunity
Get A Job.ai is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status, or membership in any other class protected by federal, state, or local law.