M&A Cyber Due Diligence Lead

Cencora; Conshohocken (Montgomery County); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical benefits

Dental and vision insurance

Paid time off

Training & development programs

Mentorship & ERG involvement

Job summary

Cencora is seeking a SecureMA&DLead to drive cybersecurity due diligence for mergers, acquisitions, divestitures, and other strategic transactions. You will identify cyber risks, estimate remediation and integration costs, and manage third-party diligence partners to support Day‑1 readiness.

You will partner with Finance, Legal, IT, and Information Security to validate risks and costs, translate findings into business impact, and transfer outcomes to system owners before close.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity, CS, information systems or IT.
• 6+ years in information security analysis, cybersecurity engineering, incident response, vulnerability management, or M&A due diligence.
• Experience leading cybersecurity assessments, risk reviews, diligence activities, or integration planning.

Responsibilities

• Lead pre-close cybersecurity due diligence for MA&D transactions.
• Review target-company security posture, documentation, interviews, and assessment results.
• Identify key cyber risks, control gaps, compliance concerns, and Day 1 readiness issues.
• Translate findings into business, operational, and financial impacts.
• Manage third‑party diligence providers, including scope, timelines, and quality of findings.
• Develop preliminary cost estimates for remediation, integration, tooling, licensing, labor, and run support.
• Partner with Finance, Corporate Development, Legal, IT, and Information Security to validate risks and costs.
• Transfer diligence findings to security capability owners before close.
• Support Day 1 readiness planning with minimum controls and immediate post-close actions.
• Maintain documentation of risks, decisions, assumptions, actions, and handoffs.
• Improve diligence templates, playbooks, and cost models.

Skills

Vendor management

Stakeholder management

Executive communication

Cost estimation

Risk assessment

Multi‑transaction handling

Fast learner

Education

Bachelor's degree in cybersecurity, CS, IT, or related field

Equivalent experience

Certifications such as CISSP/CISM/CRISC/CISA/CCSP (plus)

Tools

Security domains knowledge

Job description

Cencora is seeking a SecureMA&DLead to drive cybersecurity due diligence for mergers, acquisitions, divestitures, and other strategic transactions. You will identify cyber risks, estimate remediation and integration costs, and manage third-party diligence partners to support Day‑1 readiness.

You will partner with Finance, Legal, IT, and Information Security to validate risks and costs, translate findings into business impact, and transfer outcomes to system owners before close.