• Cultivate and maintain strong relationships with business stakeholders. • Conduct threat intelligence for potential incoming target acquisition companies. • Lead security and privacy due diligence process for target acquisitions, including technical architecture reviews, penetration tests, vulnerability assessments, security and privacy evaluations, risk identification and risk prioritization. • Develop the security strategy for each incoming M&A; documenting key details about the target acquisition, technology stack, current security and privacy posture, third-party due diligence results, etc. ahead of deal close to ensure that all members across SPA teams and relevant stakeholders are up-to-speed and understand the acquisition’s security posture. • Partner closely with our corporate IT M&A counterparts throughout the acquisition due diligence process. • Partner with the the M&A Security TPM to hand off active onboarding integration activities to ensure a smooth transition for the target acquisition personnel. • Manage long term security and privacy risk management for the subsidiary after active onboarding completes, where applicable; ensuring that critical and high risk security risks are prioritized and mitigated/resolved. • Evaluate risks within the acquisition, advise the business on prioritization, and recommend treatment strategies. • Develop metrics and reporting in partnership with the M&A Security TPM to communicate security and privacy M&A to SPA and other key stakeholders. • Serve as the subject matter expert for the target on security, privacy, risk, and compliance.