Cyber Security Risk Manager

Tenth Revolution Group; Madrid; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Tenth Revolution Group is seeking a Cyber Security Risk & Due Diligence professional to support strategic corporate transactions from a cyber security perspective. You will evaluate cyber risk exposure across targets, divested businesses, and joint ventures, coordinating with Legal, IT, Data Privacy, and external advisors to ensure risks are understood and managed throughout the deal lifecycle.

The role combines Cyber Security, M&A, Due Diligence, and Risk Advisory in a highly international

Qualifications

• Experience in Cyber Security Governance, Risk & Compliance (GRC) or Cyber Risk Management.
• Experience conducting Cyber Security Risk Assessments and remediation activities.
• Experience with M&A, acquisitions, divestitures, carve-outs, integrations, or due diligence environments.

Responsibilities

• Lead Cyber Security Due Diligence workstreams in transactions and divestitures.
• Assess security maturity and cyber posture of target organizations.
• Review infrastructure, cloud, apps, data, identity, OT, third‑party risk, and governance frameworks.
• Identify cyber risks and evaluate their operational, financial, contractual, and regulatory impact.
• Translate findings into executive risk reports and recommendations.

Skills

GRC & Risk

Cyber Risk Assessments

M&A Transactions

Job description

Are you passionate about helping organizations navigate acquisitions, divestitures, carve-outs, and strategic investments from a Cyber Security perspective?

We are looking for a Cyber Security Risk & Due Diligence professional to join a global team supporting strategic corporate transactions and helping decision-makers understand cyber risks before, during, and after a deal.

This position combines Cyber Security, M&A, Due Diligence, Risk Advisory, and Project Management within a highly international environment.

Your Mission

As the Cyber Security lead within M&A transactions, you will evaluate the cyber risk exposure of acquisition targets, businesses being divested, joint ventures, and strategic investments.

You will work closely with Corporate M&A, Legal, Data Privacy, IT, Business Leaders, external advisors, and Cyber Security SMEs to ensure cyber risks are properly assessed, understood, and managed throughout the transaction lifecycle.

Key Responsibilities

• Lead Cyber Security Due Diligence workstreams during acquisitions, investments, divestitures, and carve-outs.
• Assess the security maturity and cyber posture of target organizations.
• Review infrastructure, cloud environments, applications, data, identity management, OT environments, third-party relationships, and security governance frameworks.
• Identify transaction-related cyber risks and evaluate their potential operational, financial, contractual, and regulatory impact.
• Translate technical findings into executive-level risk reports and recommendations.
• Support transaction negotiations by providing cyber risk insights to decision-makers.
• Define and track remediation plans and risk mitigation actions.
• Support Day-1 Readiness, Transition Service Agreements (TSAs), integration planning, separation planning, and Post-Merger Audit activities.
• Coordinate internal Cyber Security experts and external advisors across multiple regions.

Ideal Background

We are particularly interested in professionals coming from:

• Technology Risk Advisory
• Transaction Services
• M&A Consulting
• Cyber Security Consulting

Must-Have Requirements

• Experience in Cyber Security Governance, Risk & Compliance (GRC), Cyber Risk Management or Technology Risk.
• Experience conducting Cyber Security Risk Assessments and risk remediation activities.
• Previous exposure to M&A transactions, acquisitions, divestitures, carve-outs, integrations, separations, or Due Diligence environments.
• Experience preparing executive-level risk assessments and reports.
• Ability to explain technical Cyber Security findings in business language.
• Experience interacting with senior executives and decision-makers.

Strongly Preferred

• M&A Integration or Separation experience.
• Carve-out projects.
• Transition Service Agreements (TSA).
• Technology Risk Advisory experience within a consulting environment.
• Experience assessing target companies before acquisitions.
• Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor.

Why Join?

• Work on strategic global transactions.
• Direct exposure to executive stakeholders and corporate decision-making.
• Influence investments, acquisitions, and divestitures from a Cyber Security perspective.
• Combine Cyber Security expertise with business strategy and M&A.
• International and multicultural environment.
• Flexible hybrid working model.

Keywords

Cyber Due Diligence | M&A Cyber Security | Transaction Services | Technology Risk | Cyber Advisory | Risk Advisory | Carve-Out | Divestiture | Acquisition | Post-Merger Integration | TSA | Cyber Risk Management | Information Security | GRC | Corporate Development | ISO 27001 | NIST | Third-Party Risk | Cyber Assessment