Director, Global Product Security (Medical Devices) – Hybrid

Johnson & Johnson Co.; West Chester (Chester County); Hybrid; USD 154,000 - 266,000; Full time

Benefits offered by this job

Vacation 120 hours per year

Sick leave 40 hours per year

Holiday pay 13 days per year

Parental Leave 480 hours per year

Bereavement Leave 240 hours per year

Job summary

Johnson & Johnson is recruiting a Director of Product Security. This hybrid role in the USA leads the global product security strategy for medical devices and digital products, partnering with R&D, Quality, Regulatory, and IT to strengthen security at scale and safeguard patients and the business.

With 10–12 years in leadership, you will drive governance, risk management, and compliant execution across geographies, including cross-border postings and external partners.

Qualifications

• 10–12 years of cybersecurity or product security leadership experience.
• Experience securing complex software-enabled or connected devices in regulated environments.
• Knowledge of secure development, vulnerability management, and risk frameworks.
• Ability to lead global teams and influence across functions.

Responsibilities

• Define and lead the global product security strategy.
• Governance, secure development lifecycle across hardware, software and devices.
• Integrate cybersecurity risk management into design, development, and post-market activities.
• Lead global teams and external partners delivering product security services and tools.
• Oversee vulnerability management, threat modeling, testing, and incident response.
• Ensure compliance with global cybersecurity and medical device regulations.

Skills

Cybersecurity leadership

Product security

Executive communication

Education

Bachelors in CS/Engineering

Masters in Cybersecurity/Engineering/MBA

Job description

Johnson & Johnson is recruiting a Director of Product Security. This hybrid role in the USA leads the global product security strategy for medical devices and digital products, partnering with R&D, Quality, Regulatory, and IT to strengthen security at scale and safeguard patients and the business.

With 10–12 years in leadership, you will drive governance, risk management, and compliant execution across geographies, including cross-border postings and external partners.