West Monroe is looking for a Cybersecurity & Compliance Advisor to join our Tech Transaction Services (TTS) practice and focus on cyber due diligence and compliance for the sake of client M&A activity. The advisor will partner directly with both Transaction Services architects and executive client stakeholders to deliver assessments across a variety of industries, including Private Equity, High-Tech & Software, Healthcare, and Financial Services. As a technology agnostic firm, consultants have the chance to continuously expand their skillset while working with cutting edge tools, platforms, and frameworks. This is an exciting opportunity to work within our newly formed (but long existing) technology M&A practice area and lead strategic cybersecurity assessment, advisory, and compliance focused initiatives.

Responsibilities:

• Collaborate with TTS consultants from other competencies (I.e. Cloud, Software) in support of holistic, tech due diligence assessments for client M&A activity, and identify remediation opportunities through analysis of existing technology systems, cybersecurity maturity, and business processes
• Leverage technical expertise in cybersecurity to perform due diligence and assessment work for M&A activity across various industries, such as Financial Services, Private Equity, Healthcare, Retail, etc.
• Provide strategic cybersecurity M&A advisory and compliance consulting services for enterprise clients, ranging from security assessments to policy definition and adoption
• Document current state review of existing cybersecurity organization, processes, and technologies to deliver key findings and recommendations
• Develop implementation strategies and roadmaps to help clients achieve compliance and strengthen their cybersecurity posture
• Manage client relationships and meet with stakeholders/investors to determine business and functional requirements, translating them to clear projects proposals, including detailed work plans and cost estimates
• Contribute to the business development process at existing clients, looking for additional opportunities for West Monroe solutions
• Promote thought leadership in emerging technologies; from partnerships to go-to-market offerings and strategy, to design and implementation
• Actively build a professional and affiliate network in the consulting, cybersecurity, M&A, and broader tech communities

Qualifications:

• Bachelor’s degree in relevant field preferred, or equivalent experience required
• Consulting firm/industry experience preferred
• 6-11+ years of professional experience focused on cybersecurity and/or technology M&A
• Experience working with compliance and/or privacy frameworks, such as PCI, HIPAA, SOC2, GDPR, CCPA, NERC CIP, ISO, etc.
• Experience leading cybersecurity assessment work (NIST) – risk and compliance, auditing controls, threat hunting, vulnerability management, incident response and IR plan development, network security, application security, etc.
• Understanding of high-level application, database, and network security principles for risk identification, mitigation, and analysis
• Experience developing cybersecurity architectural roadmaps, sub-domain strategies, product roadmaps, etc.
• Comfortable leading teams and project managing end-to-end solutions, which could include strategy, design, development, testing and training, and/or ad hoc post-close remediation work
• Ability to convey complex cybersecurity concepts to technical and non-technical audiences, including executives
• Excellent organizational, presentation/facilitation, verbal, and written communication skills
• Bonus experience – technology M&A/PE due diligence, vCISO projects, certifications like CISSP/CISM, cloud security
• Willingness to travel for out of town client engagements – COVID-19 permitting