M&A Cybersecurity Lead for Pre-Close Diligence

Cencora; Conshohocken (Montgomery County); On-site; USD 170,000 - 250,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

Backup dependent care

Parental leave

Professional development

Mentorship programs

Job summary

Cencora is seeking a Principal, Secure MA&D who leads pre-close cybersecurity due diligence for mergers, acquisitions, divestitures, and other strategic transactions. You will identify cyber risks, estimate remediation costs, manage third-party diligence partners, and support Day 1 readiness planning.

You will collaborate with Finance, Corporate Development, Legal, IT, and Information Security to validate risks and costs, ensuring seamless handoffs at close.

Qualifications

• Bachelor’s degree required; PMP (or equivalent formal project management certification) and CRISC strongly preferred.
• Additional Certifications such as CISSP, CISM, CISA, or CCSP are a plus.
• 8–10+ years of experience in cybersecurity, information risk, security consulting, M&A due diligence, or security program leadership.
• Experience leading cybersecurity assessments, risk reviews, diligence activities, or integration planning.

Responsibilities

• Lead pre-close cybersecurity due diligence for MA&D transactions.
• Review target-company security posture, documentation, interviews, and assessment results.
• Identify key cyber risks, control gaps, compliance concerns, and Day 1 readiness issues.
• Translate technical findings into clear business, operational, and financial impacts.
• Manage third-party cybersecurity diligence providers, including scope, timelines, deliverables, and quality of findings.

Skills

Cybersecurity leadership

M&A due diligence

Vendor management

Executive communication

Risk assessment

Cloud security

GRC

Education

Bachelor’s degree

PMP certification

CRISC certification

Job description

Cencora is seeking a Principal, Secure MA&D who leads pre-close cybersecurity due diligence for mergers, acquisitions, divestitures, and other strategic transactions. You will identify cyber risks, estimate remediation costs, manage third-party diligence partners, and support Day 1 readiness planning.

You will collaborate with Finance, Corporate Development, Legal, IT, and Information Security to validate risks and costs, ensuring seamless handoffs at close.