Cyber Governance Lead: Policy, Risk & Compliance

Johnson & Johnson MedTech

New Brunswick (NJ)

On-site

USD 140,000 - 190,000

Full time

2 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Johnson & Johnson's DePuy Synthes is recruiting a Professional, Compliance Lead to lead cybersecurity governance and risk across the enterprise. The role sits in the Cybersecurity function and interfaces with Internal Audit, Legal, Privacy, Quality, and regulators.

You will own policy, risk methodology, KRIs, third-party risk oversight, and executive reporting to CIO/CISO and senior leadership. This position supports cloud, ERP, and major platform changes while advancing cyber culture

Qualifications

6 years of progressive experience in cybersecurity governance, IT risk management, or a GRC discipline.
Ownership of a security policy and standards framework with governance lifecycle and approvals.
Advanced knowledge of NIST CSF, NIST 800-53, ISO 27001/27002, COBIT; cross-framework rationalization.

Responsibilities

Lead end-to-end cybersecurity policy and standards program; govern content, attestations, and exceptions.
Define and maintain enterprise cyber risk framework, scoring model, risk appetite, and escalation thresholds.
Direct the cyber risk assessment program across applications, infrastructure, and major changes; ensure method consistency.