Cybersecurity Deal Lead, Pre-Close A&D Risk

Johnson & Johnson Co.; Heber (UT); Remote; USD 120,000 - 190,000; Full time

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across transactions and licenses. You will translate technical findings into business risk insights, shaping Day 1 security priorities and post-close integration plans.

You will partner with Corporate Development, Legal, Privacy, Finance, and Technology Services to ensure security requirements are understood and executed, with remote work

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, or Business.
• 8+ years of progressive cybersecurity and information risk management experience.
• Experience leading or supporting cybersecurity due diligence, acquisition/divestiture assessments, or third‑party security reviews.
• Strong knowledge across security architecture, IAM, cloud/infrastructure security, data protection, and incident response.
• Excellent written and verbal communication, with ability to translate technical risk for business leaders.

Responsibilities

• Lead deal-level cybersecurity assessments for M&A transactions and pre-close due diligence.
• Translate diligence findings into actionable risk insights and mitigation recommendations.
• Coordinate with Corporate Development, Legal, Privacy, Finance, and Technology Services to align on risk and deal conditions.
• Develop Day 1 security objectives, TSA considerations, and post-close handoff materials.
• Contribute to playbooks, risk taxonomies, and evidence standards for diligence.

Skills

Cybersecurity

M&A due diligence

Risk management

Security architecture

Communication

Education

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, or Business

MBA, MS or equivalent preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across transactions and licenses. You will translate technical findings into business risk insights, shaping Day 1 security priorities and post-close integration plans.

You will partner with Corporate Development, Legal, Privacy, Finance, and Technology Services to ensure security requirements are understood and executed, with remote work