BAIP Security Manager - SAP BTP & AI Platform Security

Johnson Johnson; Raritan (NJ); On-site; USD 102,000 - 176,000; Full time

Job summary

Johnson & Johnson is seeking an experienced SAP BTP Security Manager to lead security strategy, architecture, governance for SAP BTP, enterprise apps, integrations, and AI-enabled solutions in Raritan, NJ. This role focuses on secure-by-design principles across cloud-native development, SAP BTP services, APIs, and AI platforms.

The ideal candidate blends deep SAP BTP security expertise with cloud architecture, application security, and AI governance to drive platform security initiatives,

Qualifications

• Bachelor's or Master's degree in a related field.
• 8+ years in cybersecurity, platform engineering, or security leadership.
• Strong experience with SAP BTP and enterprise cloud architectures.
• Experience securing SAP BTP services and related components.

Responsibilities

• Define enterprise security architecture across SAP BTP services.
• Lead secure SDLC/AI SDLC integration and governance.
• Implement DevSecOps in CI/CD pipelines and tooling.
• Drive compliance, risk mgmt, and audit readiness across environments.
• Lead security reviews and mentor security teams.

Skills

Budget Management

Leadership

Security Architecture

DevSecOps

Cloud Security

SAP BTP

Compliance

Communication

Education

Bachelor's or Master's degree

Tools

SAP BTP

Dynatrace

SAP Cloud ALM

Splunk

Job description

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Learn more at jnj.com

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function

Technology Product & Platform Management

Job Sub Function

Multi-Family Technology Product & Platform Management

Job Category

People Leader

All Job Posting Locations

Raritan, New Jersey, United States of America

Job Description

We are seeking an experienced SAP BAIP/BTP Security Manager to lead the security strategy, architecture, governance, and operational excellence for SAP Business Technology Platform (SAP BTP), enterprise applications, integrations, and AI-enabled solutions to be located in Raritan, NJ.

This role is responsible for establishing secure-by-design principles across cloud-native application development, SAP BTP services, APIs, integrations, DevSecOps pipelines, and AI platforms.

The ideal candidate will combine deep expertise in SAP BTP security, cloud architecture, application security, and AI governance with strong leadership capabilities to drive platform security initiatives, compliance readiness, risk management, and continuous improvement across the technology ecosystem.

Key Responsibilities

Security Architecture & Platform Governance

• Define and implement enterprise security architecture standards across SAP BTP services including Cloud Foundry, Kyma, SAP HANA Cloud, Integration Suite, API Management, Event Mesh, SAP Build, and AI Foundation.
• Develop and maintain secure reference architectures, trust-boundary diagrams, network security models, and hybrid-cloud security patterns.
• Establish enterprise standards for identity management, authentication, authorization, encryption, secrets management, key management, and certificate lifecycle management.
• Drive Zero Trust security principles across cloud-native applications, integrations, APIs, and platform services.
• Translate cybersecurity, privacy, compliance, and regulatory requirements into scalable engineering controls and platform standards.

Application, Integration & AI Security

• Ensure secure-by-design implementation across SAP BTP application development initiatives and enterprise integration solutions.
• Partner with development teams to integrate security throughout the Software Development Lifecycle (SDLC) and AI Software Development Lifecycle (AI SDLC).
• Define security standards for APIs, microservices, event-driven architectures, and enterprise messaging platforms.
• Establish governance and security controls for SAP Business AI, Joule, Generative AI, AI agents, RAG architectures, and intelligent automation solutions.
• Implement secure AI integration patterns connecting enterprise systems, business processes, AI services, and knowledge repositories.
• Provide security guidance and architecture reviews for cloud-native applications and AI-enabled business solutions.

DevSecOps & Security Operations

• Lead implementation of DevSecOps practices including SAST, DAST, dependency scanning, software composition analysis, secret detection, and security policy enforcement.
• Integrate automated security controls into CI/CD pipelines, GitHub workflows, SAP Cloud Transport Management (CTMS), and deployment processes.
• Drive vulnerability management, remediation programs, risk reduction initiatives, and continuous compliance monitoring.
• Support security incident response, threat modeling, penetration testing, and security assessments.
• Promote engineering excellence through automation, security-by-default practices, and continuous improvement.

Compliance, Risk & Observability

• Lead internal and external audit activities, compliance reviews, risk assessments, and remediation efforts.
• Define audit logging, monitoring, observability, and threat detection strategies across SAP BTP and hybrid cloud environments.
• Implement security monitoring capabilities using tools such as Dynatrace, SAP Cloud ALM, Splunk, Grafana, and Prometheus.
• Establish governance frameworks for data protection, data classification, access management, and responsible AI.
• Ensure compliance with enterprise cybersecurity, privacy, regulatory, and AI governance standards.

Leadership & Stakeholder Management

• Lead and mentor security architects, security engineers, DevSecOps engineers, and contractor resources.
• Partner with enterprise architecture, cybersecurity, privacy, compliance, SAP platform teams, and business stakeholders.
• Establish security KPIs, operational metrics, audit readiness measures, and risk reporting frameworks.
• Communicate security strategies, roadmaps, risks, and remediation plans to senior leadership.
• Foster a culture of security awareness, innovation, accountability, and continuous learning.

Innovation & Technology Strategy

• Evaluate emerging cloud security, AI security, and SAP BTP technologies.
• Lead proof-of-concepts, technology pilots, and security architecture reviews.
• Collaborate with SAP and strategic technology partners to assess and adopt innovative security capabilities.
• Drive continuous enhancement of enterprise security posture and platform resilience.

Required Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related field.
• 8+ years of experience in cybersecurity, platform engineering, cloud security, application security, or enterprise technology leadership roles.
• Strong experience with SAP Business Technology Platform (SAP BTP) and enterprise cloud architectures.
• Experience securing SAP BTP services including Cloud Foundry, Kyma, SAP HANA Cloud, Integration Suite, API Management, Event Mesh, and SAP Build.
• Experience implementing enterprise security controls for APIs, integrations, microservices, messaging platforms, and event-driven architectures.
• Deep understanding of authentication, authorization, IAM, OAuth, OIDC, SAML, encryption, certificates, secrets management, and Zero Trust principles.
• Experience implementing DevSecOps capabilities within CI/CD pipelines and cloud application delivery processes.
• Knowledge of SAP Business AI, Generative AI, AI governance, responsible AI practices, and AI security controls.
• Strong understanding of compliance, audit readiness, privacy, risk management, and security governance.
• Proven experience leading technical teams and influencing cross-functional organizations.
• Excellent communication, leadership, stakeholder management, and problem-solving skills.

Preferred Qualifications

• SAP BTP Security, Technology Consultant, Administrator, Solution Architect, or related SAP certifications.
• Industry certifications such as CISSP, CCSP, CISM, AWS Security Specialty, Azure Security Engineer, or equivalent.
• Experience with SAP AI Foundation, Joule, Joule for Developers, Generative AI Hub, vector databases, RAG architectures, and AI agent frameworks.
• Experience implementing enterprise AI governance, observability, evaluation frameworks, and AI guardrails.
• Experience with Dynatrace, SAP Cloud ALM, Splunk, Grafana, Prometheus, and enterprise monitoring platforms.
• Experience securing Solace, Advanced Event Mesh, Apache Kafka, or similar messaging technologies.
• Experience designing security architecture across multi-cloud and hybrid cloud environments.
• Familiarity with CAP, RAP, ABAP Cloud, Fiori/UI5, GitHub, DevOps, and modern application lifecycle management practices.

Required Skills

• Budget Management
• Business Architecture
• Business Process Design
• Business Savvy
• Computer Programming
• Developing Others
• Human-Computer Interaction (HCI)
• Inclusive Leadership
• Leadership
• Motivating People
• Platform as a Service (PaaS)
• Product Knowledge
• Resource Allocation
• Software Development Management
• Strategic Change
• Tactical Planning
• Team Management
• Technical Credibility

Preferred Skills

• Budget Management
• Business Architecture
• Business Process Design
• Business Savvy
• Computer Programming
• Developing Others
• Human-Computer Interaction (HCI)
• Inclusive Leadership
• Leadership
• Motivating People
• Platform as a Service (PaaS)
• Product Knowledge
• Resource Allocation
• Software Development Management
• Strategic Change
• Tactical Planning
• Team Management
• Technical Credibility

Base Pay Range

$102,000 - $175,950

Additional Description for Pay Transparency

• medical
• dental
• vision
• life insurance
• short- and long-term disability
• business accident insurance
• group legal insurance
• Company's consolidated retirement plan (pension) and savings plan (401(k))
• Vacation -120 hours per calendar year
• Sick time - 40 hours per calendar year
• Employees who reside in the State of Washington -56 hours per calendar year
• Holiday pay, including Floating Holidays -13 days per calendar year
• Work, Personal and Family Time - up to 40 hours per calendar year
• Parental Leave - 480 hours within one year of the birth/adoption/foster care of a child
• Condolence Leave - 30 days for an immediate family member
• 5 days for an extended family member
• Caregiver Leave - 10 days
• Volunteer Leave - 4 days
• Military Spouse Time-Off - 80 hours

Additional information can be found through the link below. https://www.careers.jnj.com/employee-benefits

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants' needs. If you are an individual with a disability and would like to request an accommodation, please contact us via https://www.jnj.com/contact-us/careers or contact AskGS to be directed to your accommodation resource.

#JNJTech

#LI-Hybrid