M&A Cybersecurity Due Diligence Lead

World Courier; Conshohocken, Northern (Montgomery County, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Cencora is seeking a Secure MA&D Lead to drive cybersecurity due diligence for mergers, acquisitions, divestitures, and other strategic transactions. You will identify cyber risks, estimate remediation costs, manage diligence partners, and support Day-1 readiness planning with cross-functional teams.

The role requires 6+ years in information security and strong collaboration with Finance, Legal, IT, and Security colleagues. Travel around 5–10% may be required.

Qualifications

• Bachelor's degree ... or equivalent experience required.
• 6+ years of experience in information security analysis, cybersecurity engineering, incident response, vulnerability management, M&A due diligence, or security program leadership.
• Experience leading cybersecurity assessments, risk reviews, diligence activities, or integration planning.
• Strong understanding of core security domains, including IAM, endpoint security, vulnerability management, cloud security, data protection, security operations, GRC, and third-party risk.
• Ability to explain cyber risks in business terms and connect findings to cost, timing, compliance, and operational impact.
• Experience developing high-level remediation, integration, and run-cost estimates.
• Strong vendor-management and stakeholder-management skills.
• Excellent written and verbal communication skills, including executive-level summaries and decision materials.
• Ability to travel as needed (5% - 10%)

Responsibilities

• Lead pre-close cybersecurity due diligence for assigned MA&D transactions.
• Review target-company security posture, documentation, interviews, and assessment results.
• Identify key cyber risks, control gaps, compliance concerns, and Day 1 readiness issues.
• Translate technical findings into clear business, operational, and financial impacts.
• Manage third-party cybersecurity diligence providers, including scope, timelines, deliverables, and quality of findings.
• Develop preliminary cost estimates for remediation, integration, tooling, licensing, labor, and ongoing run support.
• Partner with Finance, Corporate Development, Legal, IT, and Information Security teams to validate risks, assumptions, and costs.
• Transfer diligence findings, risks, and open items to security capability owners before close.
• Support Day 1 readiness planning by identifying minimum required controls, dependencies, and immediate post-close actions.
• Maintain clear documentation of risks, decisions, assumptions, action items, and handoffs.
• Improve Secure MA&D diligence templates, playbooks, cost models, and reporting materials.

Skills

Cybersecurity leadership

M&A due diligence

Vendor management

Executive communication

Cost estimation

Travel readiness

Education

Bachelor's degree in cybersecurity, computer science, information systems, information technology, or related field

Job description

Cencora is seeking a Secure MA&D Lead to drive cybersecurity due diligence for mergers, acquisitions, divestitures, and other strategic transactions. You will identify cyber risks, estimate remediation costs, manage diligence partners, and support Day-1 readiness planning with cross-functional teams.

The role requires 6+ years in information security and strong collaboration with Finance, Legal, IT, and Security colleagues. Travel around 5–10% may be required.