Divestiture Workstream Lead - Cybersecurity

The Divestiture Workstream Lead - Cybersecurity is responsible for leading the cybersecurity transition workstream in support of a complex healthcare enterprise divestiture. This role owns the separation of identity and access management environments, security controls, and compliance postures - ensuring that both the divesting entity and the acquiring organization operate securely throughout and after the separation.

Working within an established divestiture governance structure, this leader coordinates closely with internal security teams, application owners, infrastructure teams, and the buyer organization to define and execute a comprehensive post-close security model that minimizes risk and ensures regulatory compliance.

Key Responsibilities

• Define and own the post-close security model for the divested entity, including network segmentation, access controls, and security monitoring

• Lead the separation of identity and access management (IAM) environments, including directory services, privileged access, and authentication systems

• Coordinate security policy changes required to support clean separation of environments

• Manage buyer access to shared systems during the TSA (Transition Service Agreement) period, ensuring appropriate controls, logging, and time-bound access governance

• Address regulatory and compliance considerations relevant to the healthcare industry (e.g., HIPAA, SOC 2, GDPR, CCPA) throughout the transition

• Identify, assess, and mitigate security risks arising during the transition period

• Partner with data, infrastructure, and application workstream leads to ensure cross-functional security alignment

• Report progress, risks, and security posture updates to divestiture program leadership on a regular cadence

Pay Range for this role is $50 - $55 depending on years of experience and education

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (Master’s preferred), or equivalent experience

• 10+ years of experience in enterprise cybersecurity, information security, or identity and access management

• Demonstrated experience supporting technology separation, integration, or transition during M&A activities

• Deep knowledge of enterprise security architecture, IAM platforms, and security operations

• Familiarity with regulatory and compliance frameworks relevant to healthcare (e.g., HIPAA, NIST, SOC 2)

• Strong stakeholder management and communication skills, with ability to translate complex security risk into business terms

• Experience operating within large enterprise program environments and reporting to executive-level leadership

• Advanced proficiency in Microsoft products with the ability to tailor documents and presentations to the level of the audience receiving the document or presentation * Certified Information Systems Security Professional (CISSP)

• Certified Information Security Manager (CISM)

• Microsoft Certified: Identity and Access Administrator or equivalent IAM certification

• Project Management Professional (PMP) or equivalent

• ITIL 4 Foundation or equivalent