Director, Cyber Defense & Incident Response

Johnson & Johnson MedTech; West Chester (Chester County); Hybrid; USD 150,000 - 259,000; Full time

Benefits offered by this job

Vacation – 120 hours/year

Sick time – 40 hours/year

Holiday pay – 13 days/year

Parental Leave – 480 hours/year

Bereavement Leave – 240 hours/year

Job summary

Johnson & Johnson’s DePuy Synthes unit seeks a Director of Cyber Defense to lead the global incident response and threat management program. This hybrid role sits across multiple U.S. locations and may include international postings.

You will own preparedness, containment, and remediation of security incidents, reporting to the DePuy Synthes Technology organization. The role requires 10–12 years in cybersecurity leadership, strong executive communication, and experience in regulated

Qualifications

• 10-12 years of progressive experience in cybersecurity, information security, or IT risk management, including leadership.
• Proven experience leading enterprise-scale incident response and threat management programs.
• Experience in regulated environments (healthcare, life sciences, MedTech, or similarly regulated industries).
• Demonstrated ability to lead cross-functional teams during high-pressure incidents.

Responsibilities

• Lead the global incident response, digital forensics, defense engineering, and cyber threat intelligence capabilities, with accountability for preparedness, detection, containment, response, recovery, and continuous improvement.
• Build and mature an automation- and AI-first global Security Operations Center operating model that integrates an MSSP, retained services, and an internal team spanning eDiscovery, investigations, threat intelligence, incident response, and defense engineering.
• Direct complex cybersecurity incident investigations, ensuring rapid containment, preservation of forensic evidence, rigorous root-cause analysis, coordinated remediation, and timely executive and post-incident reporting.
• Develop, automate, test, and continuously improve incident response playbooks, escalation paths, communications protocols, and crisis management procedures to enable consistent, timely, and coordinated action during cyber events.
• Partner with IT, Legal, Privacy, Quality, and Business leaders to manage cyber incidents and regulatory or compliance obligations.
• Oversee threat intelligence capabilities that identify and assess emerging threats and vulnerabilities relevant to the MedTech environment, translate intelligence into prioritized defensive actions, and deliver concise executive briefings on business implications and recommended responses.

Skills

Cybersecurity leadership

Incident response

Threat intelligence

Executive communication

Education

Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field

Master’s degree in Cybersecurity, Information Systems, or Business Administration

Job description

Johnson & Johnson’s DePuy Synthes unit seeks a Director of Cyber Defense to lead the global incident response and threat management program. This hybrid role sits across multiple U.S. locations and may include international postings.

You will own preparedness, containment, and remediation of security incidents, reporting to the DePuy Synthes Technology organization. The role requires 10–12 years in cybersecurity leadership, strong executive communication, and experience in regulated