Cybersecurity Deal Lead – Pre-Close (M&A)

Johnson & Johnson Innovative Medicine; Minneota (MN); On-site; USD 122,000 - 213,000; Full time

Job summary

Johnson & Johnson is seeking a Senior Manager for Information Security Risk Management in the A&D space to lead cybersecurity due diligence for mergers, acquisitions, divestitures, licensing arrangements, minority investments, and strategic partnerships.

The role requires deep technical expertise across security architectures, IAM, cloud, data protection, and risk analysis, with the ability to translate findings into actionable risk insights and post‑close plans.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity and information risk management.
• Experience leading or supporting cybersecurity due diligence, acquisition/divestiture, or related assessments.

Responsibilities

• Deal Lead for Pre-Close Cybersecurity Due Diligence: primary ISRM A&D lead coordinating diligence activities and documenting findings.
• Technical Risk Assessment & Analysis across security domains to identify material risks and remediation needs.
• Diligence Execution & Evidence Review: manage questionnaire reviews, evidence consolidation, and risk conclusions.
• Transaction Risk Decision Support: translate findings into business-focused recommendations for risk acceptance, protections, and Day 1 priorities.
• Stakeholder Coordination & Escalation: align across functions and governance channels to resolve questions and escalate material issues.
• Pre-Close Readiness & Handoff: define Day 1 objectives and handoff materials for post-close integration or separation.

Skills

Cybersecurity

Due diligence

M&A experience

Regulatory knowledge

Education

Bachelor's degree in Information Security or related

MBA or MS preferred

Job description

Johnson & Johnson is seeking a Senior Manager for Information Security Risk Management in the A&D space to lead cybersecurity due diligence for mergers, acquisitions, divestitures, licensing arrangements, minority investments, and strategic partnerships.

The role requires deep technical expertise across security architectures, IAM, cloud, data protection, and risk analysis, with the ability to translate findings into actionable risk insights and post‑close plans.