Cyber Associate Director

DVF Recruitment; Greater London; Hybrid; GBP 130,000 - 180,000; Full time

Job summary

A London-based, leading global consulting firm is seeking an Associate Director for Cyber Consulting to join its M&A practice in London, hybrid work. The role focuses on cyber, technology and digital risk across pre-deal due diligence, post-deal reviews, remediation and exit readiness.

Candidates should bring deep cyber expertise, experience in M&A, private equity, or infrastructure investment environments, and the ability to translate technical risk into commercial terms for senior investors.

Qualifications

• Strong grounding in core cyber domains, IAM, incident response, vulnerability management, network security, monitoring.
• Experience assessing controls against recognised frameworks (NIST CSF, ISO 27001, CIS Controls, IEC 62443).
• Knowledge of regulatory frameworks, GDPR, NIS2, DORA, FCA/PRA, Operational Resilience, EU Cyber Resilience Act.
• Experience in M&A, private equity, transaction advisory, portfolio company, or infrastructure investment environments.
• Ability to translate technical and financial risk into commercial terms for senior investors.
• Confidence pitching, proposing and building client relationships.

Job description

Associate Director – Cyber Consulting | London / Hybrid

Our client, a leading global Consulting organisation is looking for candidates with deep technical cyber knowledge.

We are exclusively retained by a leading global professional services firm to hire into their M&A practice, a team that sits at the heart of major M&A activity, advising clients on cyber, technology and digital risk across the full transaction lifecycle: pre-deal due diligence, post-deal reviews, remediation, and exit readiness. Part of a genuinely global digital M&A function across Benelux, DACH, Southern Europe, Middle East, growing US presence

The team is built from cyber security, digital forensics, incident response and military backgrounds, technical operators, not generalists, who can also hold a room with senior investors and translate risk into commercial, financial and investment terms.

1. Private Equity Focus

Advising PE sponsors and portfolio companies across the deal lifecycle, technical due diligence, hold-period risk monitoring, 100-day planning, carve-outs, integrations, exit readiness.

2. Critical Infrastructure Focus

Advising infrastructure investors across energy, aviation, data centres and related sectors. Genuine OT/ICS experience is essential here, this is cyber risk in physical and operational infrastructure environments, not corporate IT.

What you'll need (genuine depth in one or two areas, not every box ticked):

• Strong grounding in core cyber domains, IAM, incident response, vulnerability management, network security, monitoring
• Experience assessing controls against recognised frameworks (NIST CSF, ISO 27001, CIS Controls, IEC 62443 for infrastructure-focused candidates)
• Knowledge of regulatory frameworks, GDPR, NIS2, DORA, FCA/PRA, Operational Resilience, EU Cyber Resilience Act
• Experience in M&A, private equity, transaction advisory, portfolio company, or infrastructure investment environments
• Ability to translate technical and financial risk into commercial terms for senior investors, this matters as much as the technical depth
• Confidence pitching, proposing and building client relationships, not just delivering findings

Confidential client, full details shared on application.