Director Software Quality Engineering & Cybersecurity

6267-Auris Health Inc. Legal Entity

Santa Clara (CA)

On-site

USD 172,000 - 298,000

Full time

3 days ago
Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Vacation 120 hours/year
Pension
401(k)
Long-term incentive program

Job summary

Johnson & Johnson MedTech in Santa Clara, CA seeks a Director to lead Software Quality Engineering and Cybersecurity for the OTTAVA robotic platform. You will own software quality strategies, lifecycle, and risk management, ensuring regulatory compliance and safe product commercialization.

On-site attendance is required at least 3 days a week. You will collaborate with R&D, Regulatory, and cybersecurity teams to align with FDA guidance and ISO standards, driving excellence and inspection

Qualifications

  • Bachelor’s degree in engineering, CS, software engineering, biomedical engineering, or related field.
  • Advanced degree preferred.
  • Minimum 12 years in medical devices or highly regulated industries.
  • Minimum 7 years in leadership of software quality or software engineering teams.
  • Hands-on with AI/ML-enabled device development, software lifecycle, and cybersecurity.
  • Experience with FDA submissions, inspections, and regulatory audits.

Responsibilities

  • Lead Software Quality Engineering for the OTTAVA robotic platform and digital tech.
  • Ensure software quality strategies align with FDA, ISO 13485, IEC 62304, ISO 14971.
  • Oversee software design controls, lifecycle, risk management, and cybersecurity controls.
  • Partner with Regulatory Affairs for regulatory submissions and cybersecurity deliverables.
  • Lead QA governance, SPDF adoption, threat modeling, and vulnerability assessments.
  • Drive inspection readiness and continuous improvement across software quality.

Skills

Software Quality Engineering
Cybersecurity Governance
Regulatory Submissions
Leadership
AI/ML in MedDevices
DevOps / SDLC

Education

Bachelor degree in engineering

Tools

SPDF
Threat Modeling
Vulnerability Assessment

Job description

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function: Supply Chain Engineering Job Sub Function: Quality Engineering Job Category: People Leader All Job Posting Locations: Santa Clara, California, United States of America

Job Description:

About MedTech Fueled by innovation at the intersection of biology and technology, we’re developing the next generation of smarter, less invasive, more personalized treatments. Your unique talents will help patients on their journey to wellness. Learn more at https://www.jnj.com/medtech Johnson & Johnson MedTech’s Robotics & Digital Surgery (RAD) business is seeking an accomplished Director Software Quality Engineering & Cybersecurity for the OTTAVA Robotic Platform to be located at Santa Clara, CA. The Director leads the quality engineering strategy and execution for software-enabled medical technologies across the OTTAVA robotic surgical platform. This leader oversees software quality engineering activities supporting software in medical device including AI/ML components, Software as a Medical Device (SaMD), Medical Device Data Systems (MDDS), embedded software, connected digital systems, non-product software validation, and cybersecurity compliance. This role partners closely with R&D, Regulatory Affairs, Medical Safety, Systems Engineering, Clinical, and enterprise cybersecurity teams to ensure software products and supporting systems meet global regulatory requirements, cybersecurity expectations, and company quality standards throughout the product lifecycle. The Director establishes scalable quality systems, drive software development and validation excellence, supports regulatory submissions and inspections, and enable safe and compliant product commercialization.

Key Responsibilities:
  • Lead the Software Quality Engineering function supporting the OTTAVA robotic surgical platform and associated digital technologies.
  • Establish and execute software quality strategies aligned with FDA, ISO 13485, IEC 62304, ISO 14971, FDA cybersecurity guidance, and applicable global regulations.
  • Provide oversight of software design controls, software lifecycle processes, software risk management, anomaly management, configuration management, and release readiness activities.
  • Ensure robust traceability between software requirements, hazards, mitigations, verification, validation, and cybersecurity controls.
  • Lead quality and compliance activities for Software as a Medical Device (SaMD) and Medical Device Data Systems (MDDS).
  • Partner with Regulatory Affairs to support regulatory submissions, FDA interactions, technical documentation, and cybersecurity deliverables.
  • Ensure software classification, intended use, and regulatory positioning are appropriately documented and maintained.
  • Lead quality oversight for product cybersecurity activities across the software development lifecycle.
  • Partner with enterprise cybersecurity and product security teams to ensure implementation of Secure Product Development Framework (SPDF) practices.
  • Oversee cybersecurity risk management, vulnerability management, penetration testing assessments, SBOM governance, threat modeling, and post-market cybersecurity processes.
  • Ensure cybersecurity activities are integrated into CAPA, complaint handling, supplier controls, and change management systems.
  • Support regulatory responses related to cybersecurity and software assurance.
  • Establish and maintain compliant validation programs for non-product software used in development, testing, manufacturing, quality systems, and operations.
  • Ensure validation approaches are risk-based, scalable, and inspection-ready.
  • Oversee governance for software tools supporting regulated activities, including lifecycle management and change control.
  • Partner with R&D and Systems Engineering to support new product development, sustaining engineering, design changes, and software releases.
  • Participate in risk management activities, design reviews, verification/validation reviews, and failure investigations.
  • Ensure software quality considerations are integrated into design transfer and launch readiness activities.
  • Develop and maintain procedures, standards, and governance models supporting software quality and cybersecurity compliance.
  • Ensure inspection readiness for FDA, notified body, and internal audits.
  • Lead software quality metrics, trend analysis, and continuous improvement initiatives.
  • Support investigations, CAPAs, complaints, and field actions involving software or cybersecurity-related issues.
  • Build and develop a high-performing Software QE organization.
  • Provide coaching, mentorship, and career development for managers and engineers.
  • Foster a culture of accountability, technical excellence, collaboration, and proactive risk management.
  • Drive clarity of ownership and effective cross-functional decision-making.
Leads with technical credibility and executive presence, inspiring confidence across engineering, operations, and executive teams.
Comprehensive understanding of Design Controls, Design Verification and Validation, and Design Transfer processes for medical devices.
Proficiency with 21 CFR Part 820, ISO 13485, ISO 14971, IEC 62304, and EU MDR compliance frameworks.
Proven success supporting FDA inspections, ISO certification audits, and MDSAP assessments with strong command of global regulatory requirements.
Qualifications/requirements:
  • Bachelor’s degree in engineering, Computer Science, Software Engineering, Biomedical engineering, or related technical field is required.
  • Advanced degree is preferred.
  • A minimum of 12 years of experience in medical devices, software-regulated, or highly regulated industries.
  • A minimum of 7 years of leadership experience managing software quality or software engineering teams.
  • Strong knowledge of IEC 62304, ISO 14971, ISO 13485, FDA QSR/QMSR, and FDA cybersecurity guidance.
  • Hands-on experience with AI/ML-enabled device development, software lifecycle management, and digital health quality integration.
  • Experience with software risk management, cybersecurity governance, and software development lifecycle processes.
  • In depth knowledge of SPDF, threat modeling, SBOM management, and vulnerability assessment processes.
  • Experience with Agile software development environments and DevOps methodologies.
  • Experience supporting FDA submissions, inspections, and regulatory audits.
  • On-site attendance at Johnson and Johnson robotic campus in Santa Clara, CA facility is required for at least 3 days a week.
Required Skills:
Preferred Skills:

Business Planning, Change Management, Coaching, Cybersecurity, Design Controls, Fact-Based Decision Making, FDA Submissions, Give Feedback, IEC 62304, Inclusive Leadership, Leadership, Process Improvements, Risk Management Software, Science, Technology, Engineering, and Math (STEM) Application, Technical Software

The anticipated base pay range for this position is :

$172,000.00 - $297,850.00

Additional Description for Pay Transparency:

Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)). This position is eligible to participate in the Company’s long-term incentive program. Subject to the terms of their respective policies and date of hire, employees are eligible for the following time off benefits:

  • Vacation –120 hours per calendar year
  • Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year
  • Holiday pay, including Floating Holidays –13 days per calendar year
  • Work, Personal and Family Time - up to 40 hours per calendar year
  • Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
  • Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year
  • Caregiver Leave – 80 hours in a 52-week rolling period10 days
  • Volunteer Leave – 32 hours per calendar year
  • Military Spouse Time-Off – 80 hours per calendar year

For additional general information on Company benefits, please go to: - https://www.careers.jnj.com/employee-benefits

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act. Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers , internal employees contact AskGS to be directed to your accommodation resource.

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com/. Do Not Sell or Share My Personal Information Limit the Use of My Personal Information

Get your free, confidential resume review.
or drag and drop your file here.
Similar jobs

Similar jobs worth comparing

Associate Director, Regulatory Affairs (Robotics & Digital Solutions) - MedTech Surgery
Associate Director, Regulatory Affairs (Robotics & Digital Solutions) - MedTech Surgery

6267-Auris Health Inc. Legal Entity • Santa Clara (CA)

Hybrid
USD 157,000 - 271,000
Senior Director, MedTech Surgery Robotics and Digital (RAD)
Senior Director, MedTech Surgery Robotics and Digital (RAD)

6090-Johnson & Johnson Services Inc. Legal Entity • Santa Clara (CA)

On-site
USD 205,000 - 353,000
Director, Software Engineering, MONARCH
Director, Software Engineering, MONARCH

6267-Auris Health Inc. Legal Entity • Santa Clara (CA)

On-site
USD 180,000 - 250,000
Long‑term incentive program
Pension & 401(k)
Robotics Integration Engineer (Sustaining)
Robotics Integration Engineer (Sustaining)

6267-Auris Health Inc. Legal Entity • Santa Clara (CA)

On-site
USD 106,000 - 170,000
Excellent benefits
Performance bonus
Retirement plan
Senior Clinical Engineer
Senior Clinical Engineer

6267-Auris Health Inc. Legal Entity • Santa Clara (CA)

On-site
USD 125,000 - 201,000
Vacation – 120 hours per calendar year
Sick time – 40 hours per calendar year
Holiday pay – 13 days per calendaryear
+2
Manufacturing Engineer
Manufacturing Engineer

Johnson & Johnson • Santa Clara (CA)

On-site
USD 91,000 - 128,000
Manufacturing Engineer
Manufacturing Engineer

6267-Auris Health Inc. Legal Entity • Santa Clara (CA)

On-site
USD 91,000 - 128,000
Principal Product Security Engineer
Principal Product Security Engineer

6267-Auris Health Inc. Legal Entity • Santa Clara (CA)

On-site
USD 118,000 - 204,000
Senior Regulatory Affairs Program Lead (OTTAVA)
Senior Regulatory Affairs Program Lead (OTTAVA)

Johnson & Johnson • Cincinnati (OH)

On-site
USD 109,000 - 175,000
Senior Regulatory Affairs Program Lead (OTTAVA)
Senior Regulatory Affairs Program Lead (OTTAVA)

6267-Auris Health Inc. Legal Entity • Cincinnati (OH)

On-site
USD 109,000 - 175,000
401(k) plan
Vacation
Parental Leave
+1