Deal Lead, Pre-Close Cybersecurity for M&A

Johnson & Johnson Co.; Maryland; Hybrid; USD 122,000 - 213,000; Full time

Job summary

Johnson & Johnson in the United States seeks a Senior Manager, ISRM Acquisitions & Divestitures Cybersecurity to lead pre-close cybersecurity due diligence for transactions, translating technical findings into risk insights and actionable recommendations.

You will partner with Corporate Development, Legal, Privacy, Finance, and IT teams to ensure Day 1 security priorities are defined and handed off for post-close integration.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related disciplines.
• Strong technical background across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, incident response, logging and monitoring, third-party risk, and cyber resilience.
• Experience translating technical cybersecurity findings into business-focused recommendations, risk narratives, remediation priorities, Day 1 considerations, contractual inputs, and post-close handoff requirements.
• Working knowledge of privacy, legal, regulatory and enterprise security obligations relevant to healthcare, MedTech, pharmaceutical, manufacturing or other regulated global environments.
• Strong understanding of frameworks and standards including NIST CSF, ISO 27001, GDPR, HIPAA, and other applicable requirements.
• Experience coordinating multiple workstreams, stakeholders, vendors, advisors, and deadlines across concurrent deals.

Responsibilities

• Deal Lead for Pre-Close Cybersecurity Due Diligence: coordinate diligence activities, manage timelines, gather evidence, and document findings for deal teams.
• Technical Risk Assessment & Analysis: evaluate target environments across security domains to identify risks, gaps, and remediation needs.
• Diligence Execution & Evidence Review: lead questionnaire review, meetings, evidence consolidation, and issue escalation.
• Transaction Risk Decision Support: translate findings into business recommendations for closing conditions and Day 1 priorities.
• Stakeholder Coordination & Escalation: align with Development, Legal, Privacy, Finance, IT, and governance bodies.
• Pre-Close Readiness & Handoff: define Day 1 objectives and handoff materials for post-close integration or separation.
• Process, Playbook & Reporting Improvement: contribute to diligence playbooks, risk taxonomies, templates, dashboards, and workflows.
• Team Leadership & Knowledge Sharing: mentor analysts and cross-functional contributors; promote consistent methods.

Skills

Cybersecurity

Information risk management

M&A due diligence

Regulatory compliance

Stakeholder management

Communication skills

Education

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline

MBA or MS preferred

Job description

Johnson & Johnson in the United States seeks a Senior Manager, ISRM Acquisitions & Divestitures Cybersecurity to lead pre-close cybersecurity due diligence for transactions, translating technical findings into risk insights and actionable recommendations.

You will partner with Corporate Development, Legal, Privacy, Finance, and IT teams to ensure Day 1 security priorities are defined and handed off for post-close integration.