Chief Cyber & Data Risk Counsel

Johnson & Johnson; New Brunswick (NJ); On-site; USD 178,000 - 307,000; Full time

Benefits offered by this job

Vacation 120 hours/year

Sick time 40 hours/year

Holiday pay 13 days/year

401(k) plan

Pension plan

Job summary

Johnson & Johnson is seeking a Strategic Advisor to the CISO within the Global Legal Organization. You will provide strategic counsel on cybersecurity, data risk, and technology governance at the enterprise level, guiding executives on regulatory requirements and risk-informed decision making.

You will lead legal support for major cyber incidents, advise on M&A and technology initiatives, and develop governance frameworks to enable secure innovation across the company.

Qualifications

• JD with US bar admission in good standing.
• 12+ years of cybersecurity legal experience.
• Proven ability to advise senior executives on complex cyber risk.

Responsibilities

• Serve as principal legal advisor to the CISO and ISRM leadership on cybersecurity, data risk, and technology law.
• Embed legal guidance into strategic tech initiatives and governance frameworks.
• Lead legal support for major cybersecurity incidents, investigations, and regulatory matters.
• Advise on data protection, cross-border data flows, and enterprise information governance.
• Counsel on cybersecurity provisions in technology agreements and M&A activities.
• Collaborate with senior legal and technology leaders to evolve the Technology Advisory Legal team.

Skills

Executive advisory

Cybersecurity governance

Regulatory compliance

Risk management

Education

Juris Doctor (JD) degree

Admission to practice law in US

12+ years of cybersecurity legal experience

Job description

Johnson & Johnson is seeking a Strategic Advisor to the CISO within the Global Legal Organization. You will provide strategic counsel on cybersecurity, data risk, and technology governance at the enterprise level, guiding executives on regulatory requirements and risk-informed decision making.

You will lead legal support for major cyber incidents, advise on M&A and technology initiatives, and develop governance frameworks to enable secure innovation across the company.