Cybersecurity Diligence Lead — M&A Pre-Close (Remote)

Johnson & Johnson Co.; Annapolis (MD); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Holiday pay

Floating holidays

Work, personal and family time

Parental Leave

Bereavement Leave

Job summary

Johnson & Johnson Co. seeks a Senior Manager of Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across deals. You will translate findings into clear risk insights, coordinate evidence, and guide risk-informed decisions before close.

Strong technical depth in security domains and experience in regulated environments are required. Hybrid work options may be considered, with collaboration across Legal, Privacy, Finance and Corporate

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation.

Responsibilities

• Lead cybersecurity due diligence for mergers, acquisitions, divestitures, licensing, minority investments and partnerships.
• Evaluate target environments for security architecture, identity, network, cloud, app security and data protection.
• Translate diligence findings into risk insights and day‑1 security requirements.
• Coordinate evidence and findings for deal teams and leadership.
• Improve diligence playbooks, questionnaires and risk scoring methods.
• Serve as cyber Deal Lead or workstream lead for transactions.

Skills

Cybersecurity

Risk management

M&A due diligence

Security architecture

Deal lead

Vendor risk

Education

Bachelor's degree in Information Security/CS/Engineering/IS/Business

Advanced degree preferred

Job description

Johnson & Johnson Co. seeks a Senior Manager of Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across deals. You will translate findings into clear risk insights, coordinate evidence, and guide risk-informed decisions before close.

Strong technical depth in security domains and experience in regulated environments are required. Hybrid work options may be considered, with collaboration across Legal, Privacy, Finance and Corporate