Cybersecurity Due Diligence Lead — Pre-Close M&A

Johnson & Johnson Co.; Wyoming (MI); Remote; USD 122,000 - 213,000; Full time

Benefits offered by this job

Vacation time 120 hours/yr

Sick time 40 hours/yr

Holiday pay 13 days/yr

Parental Leave 480 hours/yr

Volunteer Leave 32 hours/yr

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead deal-level cybersecurity due diligence across mergers, acquisitions, divestitures, licensing, minority investments, and strategic partnerships. You will translate diligence evidence into risk insights and practical mitigations for deal teams.

This role partners with Corporate Development, Legal, Privacy, Finance, Technology Services, and external advisors to

Qualifications

• 8+ years of progressively responsible cybersecurity and risk management experience, including M&A diligence.
• Experience translating technical findings into business-informed recommendations and remediation priorities.
• Familiarity with privacy, legal, and regulatory obligations in healthcare, MedTech, or regulated global environments.

Responsibilities

• Lead deal-level cybersecurity due diligence for acquisitions, divestitures, licensing, and partnerships.
• Translate diligence evidence into clear risk insights and practical mitigation recommendations.
• Collaborate with Corporate Development, Legal, Privacy, Finance, and Technology Services to align Day 1 security priorities.
• Develop, refine, and apply diligence playbooks, questionnaires, risk taxonomies, and reporting templates.
• Mentor analysts and cross-functional contributors to drive consistent, high-quality due diligence.
• Ensure structured Day 1 objectives and handoff materials for post-close integration or separation.

Skills

Cybersecurity expertise

M&A due diligence

Risk assessment

Security architecture

Communication skills

Identity & access management

Cloud security

Education

Bachelor’s degree in Information Security

MBA or MS preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead deal-level cybersecurity due diligence across mergers, acquisitions, divestitures, licensing, minority investments, and strategic partnerships. You will translate diligence evidence into risk insights and practical mitigations for deal teams.

This role partners with Corporate Development, Legal, Privacy, Finance, Technology Services, and external advisors to