Cfgi
Private Equity and Venture Capital Cybersecurity - Manager
United States · Exec
Sponsorship not specifiedDetected 89 days ago
CybersecurityComplianceStakeholder ManagementBusiness DevelopmentAccountingM&AAuditingHIPAALeadershipCommunicationPublic SpeakingInternal Audit
About the role
- This role blends hands-on delivery, executive communication, and practice leadership.
Responsibilities
- Lead cybersecurity advisory engagements across the PE/VC deal lifecycle: pre-acquisition due diligence, post-close 100-day security planning, portfolio company maturity uplift, carve-out/stand-up, and exit readiness assessments.
- Conduct and manage cybersecurity due diligence assessments for buy-side and sell-side transactions: identify material risks, quantify cyber exposure, and deliver findings in deal-team-ready formats (red/yellow/green risk summaries, indemnification inputs, rep & warranty considerations).
- Design and operationalize cybersecurity governance models (policies, standards, risk appetite, committees, reporting KPIs/KRIs) scaled appropriately to portfolio company size and PE ownership model.
- Build and mature enterprise risk programs: risk assessments, risk registers, control libraries, and control testing approaches.
- Develop and implement security policies, standards, and procedures aligned to common frameworks (e.g., NIST CSF, ISO 27001/27002, CIS, SOC 2, CMMC, FedRAMP).
- Develop investment-grade cybersecurity roadmaps and remediation plans tied to PE value-creation timelines
- track progress against milestones and communicate status to operating partners and deal teams.
- Perform vendor/third-party risk assessments and implement scalable TPRM operating models appropriate for PE-owned businesses.
- Coordinate cross-functional stakeholders (Legal, IT, Security, Compliance, Product, HR) to drive outcomes and adoption.
- Develop investment-grade cybersecurity roadmaps and remediation plans tied to PE value-creation timelines; track progress against milestones and communicate status to operating partners and deal teams.
Requirements
- Bachelor's degree in a related field is required.
- Familiarity with privacy and regulatory requirements common to PE portfolio company sectors (HIPAA, GDPR/CCPA, SOX ITGC, PCI DSS)
- deep privacy program build-out expertise is not required.
- Exceptional written and verbal communication skills with a track record of producing executive-level deliverables.
Nice to have
- Experience supporting portfolio-wide cybersecurity programs across multiple simultaneous investments.
- Exposure to incident readiness, tabletop exercises, and crisis communications coordination with Legal/Comms.
- Experience supporting audits and assurance activities (SOC 2 readiness, ISO certification readiness, internal audit coordination).
- Immediate exposure to complex, high-velocity PE and VC deal environments - due diligence, integrations, carve-outs, and exit readiness - with sophisticated sponsor and portfolio company clients.
- Opportunity to shape and scale a fast-growing Cybersecurity practice.
Skills
- Advise on cybersecurity integration and separation activities for
Compensation
- Competitive compensation, benefits, and career growth trajectory.
Benefits
- Competitive compensation, benefits, and career growth trajectory.
Company info
- pre-acquisition cyber due diligence (buy-side and sell-side), post-close 100-day security planning and portfolio company stand-up, and integration and carve-out cybersecurity workstreams.
Visa & Work Authorization
- velocity PE and VC deal environments — due diligence, integrations, carve-outs, and exit readiness — with sophisticated sponsor and portfolio company clients
This listing is sourced directly from Cfgi's careers page and normalized into a canonical job model.