Cybersecurity Analyst II

Jabil•Tampa, FL

About The Position

At Jabil (NYSE: JBL), we are proud to be a trusted partner for the world's top brands, offering comprehensive engineering, supply chain, and manufacturing solutions. With 60 years of experience across industries and a vast network of over 100 sites worldwide, Jabil combines global reach with local expertise to deliver both scalable and customized solutions. Our commitment extends beyond business success as we strive to build sustainable processes that minimize environmental impact and foster vibrant and diverse communities around the globe. Job Summary We are seeking a Cybersecurity Analyst III to play a critical role in specialized Mergers, Acquisitions and Divestitures protecting our global manufacturing operations during complex corporate transactions. You will support cybersecurity due diligence, risk assessment, integration planning, and divestiture separation activities across the full IT expansion lifecycle. This position ensures that cybersecurity risks are identified early, governance frameworks are aligned, and post-transaction cyber resilience is maintained in a high-stakes industrial environment where Information Technology (IT), operational technology (OT), and supply chain security are paramount.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field (Masters or relevant certifications preferred).
2+ years of progressive experience in cybersecurity, with at least 1 year focused on M&A due diligence, integration, or divestitures.
Strong understanding of cybersecurity governance, risk management frameworks, and regulatory requirements.
Risk assessment and/or IT Audit Experience
Exceptional analytical and risk assessment skills with the ability to translate technical findings into business impact.
Strong project management abilities.
Excellent written and verbal communication skills
Ability to thrive in fast-paced, ambiguous environments with tight deadlines.
High integrity and discretion in handling sensitive M&A information.
Willingness to travel (5%) domestically and internationally.

Nice To Haves

Masters or relevant certifications preferred.
Preferred Certifications CISSP, CISM, CRISC, CISA, or GIAC

Responsibilities

Support cybersecurity during due diligence for potential acquisitions, joint ventures, and divestitures, including comprehensive reviews of target companies’ security posture, policies, controls, and incident history.
Conduct gap analyses against industry standards (NIST, ISO 27001, CIS Controls) and our internal cybersecurity governance framework.
Identify red-flag risks that could impact integration timelines, or regulatory compliance.
Develop and execute cybersecurity integration playbooks and divestiture separation plans tailored to manufacturing operations.
Design and implement post-transaction cybersecurity governance structures, including policy harmonization, risk register updates, and control framework alignment.
Collaborate with legal, compliance, IT, OT, and business teams to embed cybersecurity requirements and integrations.
Define and track cybersecurity-related key performance indicators (KPIs) and milestones throughout the IT Expansion lifecycle.
Assess and quantify cyber risks (technical, operational, reputational) and recommend risk treatment strategies and mitigation roadmaps.
Coordinate with integration partners to ensure timely remediation of critical findings.
Support carve-out activities for divestitures, ensuring secure data segregation, system isolation, and transition service agreements (TSAs).
Post closing serves as the primary cybersecurity advisor to the M&A deal team, Cybersecurity leadership and risk committees through to target integration level.
Prepare executive-level risk summaries, dashboards, and board presentations on transaction-related cyber risks.
Contribute to the evolution of the company’s M&A Cybersecurity Playbook and governance standards.
Stay current with emerging threats, regulatory developments (e.g., SEC cybersecurity rules, NIS2, CFIUS implications), and best practices in industrial cybersecurity.
Conduct lessons-learned reviews after each transaction to refine processes.