Senior Cybersecurity Risk Architect for M&A

Quantum Technologies LLC; Aurora (IL); Remote; USD 100,000 - 142,000; Part time

Job summary

Quantum Technologies. LLC is seeking a seasoned cybersecurity professional to lead risk assessments and security due diligence for acquisitions and integrations.

The role covers end-to-end security across cloud, identity, endpoints, and networks, with emphasis on risk-based remediation plans and post-acquisition integration. The candidate should bring hands-on expertise in Azure, M365, Entra ID, vulnerability management, and governance, with preference for GCC High/NIST-CMMC experience.

Qualifications

• 10+ years of cybersecurity experience, incl. M&A security or security architecture.
• Deep knowledge of Azure Security, Microsoft 365 Security, Entra ID, Defender.
• Strong experience with vulnerability management, EDR/MDR, SIEM, IAM/PAM.
• Familiar with NIST CSF, NIST 800-53, CMMC, FedRAMP, GCC High.
• Ability to translate technical findings into business risk and exec recommendations.
• Stakeholder management across security, IT, and business teams.

Responsibilities

• Lead cybersecurity risk assessments and due diligence for acquisitions.
• Assess Azure and M365 security posture and identity controls.
• Evaluate Entra ID, MFA, CA, external identities, and governance.
• Assess vulnerability and patch management programs.
• Develop risk-based remediation roadmaps with owners and timelines.
• Support post-acquisition security integration and remediation.
• Prepare executive risk reports highlighting exposures and priorities.

Skills

Cybersecurity leadership

Azure security

M&A security

NIST CSF familiarity

Executive communication

Tools

Microsoft Defender

EDR/MDR

SIEM

NIST 800-53 reference

Job description

Quantum Technologies. LLC is seeking a seasoned cybersecurity professional to lead risk assessments and security due diligence for acquisitions and integrations.

The role covers end-to-end security across cloud, identity, endpoints, and networks, with emphasis on risk-based remediation plans and post-acquisition integration. The candidate should bring hands-on expertise in Azure, M365, Entra ID, vulnerability management, and governance, with preference for GCC High/NIST-CMMC experience.