Global Cyber Policy & Culture Leader

Johnson & Johnson Co.; Florida; Hybride; USD 150 000 - 210 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Résumé du poste

Johnson & Johnson is seeking a Senior Principal, Governance & Policy to lead cyber policy, standards, and culture across DePuy Synthes. You will drive policy management, awareness, and training with executive engagement to embed strong cyber controls across product development, manufacturing, and regulatory functions.

The role requires deep policy expertise, business acumen, and ability to influence senior leaders in a complex, regulated environment. Hybrid work model and global impact.”

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Engineering, Information Technology, or related discipline.
• 10+ years of cybersecurity experience, including policy development and governance lifecycle.
• 5+ years leading enterprise cyber policy, awareness, or culture initiatives.
• Working knowledge of NIST CSF, NIST 800-53, ISO 27001/27002, and COBIT.
• Experience in regulated industries such as Medical Devices, Healthcare, Life Sciences, Pharmaceuticals, or Manufacturing.
• Proven ability to influence senior executives and drive enterprise-wide change.
• Strong understanding of the cyber regulatory landscape.
• Exceptional written, verbal, presentation, and executive communication skills.
• Proven ability to translate complex technical risks into clear business recommendations.

Responsabilités

• Lead cyber policy, governance and strategy development across DePuy Synthes.
• Establish governance processes embedding cyber requirements across product lifecycle and operations.
• Translate regulatory requirements and threats into actionable policies and controls.
• Develop roadmaps to advance governance maturity and business growth.
• Chair policy development forums and drive cross-functional accountability.
• Lead policy exception and risk acceptance processes.
• Benchmark policies against leading cybersecurity frameworks.
• Integrate cyber requirements into secure product development lifecycle.
• Support readiness for regulatory submissions and customer assessments.
• Advise on emerging regulatory requirements impacting cyber policy globally.

Connaissances

10+ years cybersecurity experience

Enterprise cyber policy leadership

NIST CSF / 800-53 / ISO 27001/27002 /

Regulated industries experience (Med/1

Executive stakeholder influence

Cyber regulatory landscape knowledge

Security policy & governance

Written and verbal communication

Translate risks to business actions

Formation

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Engineering, IT, or related discipline

Description du poste

Johnson & Johnson is seeking a Senior Principal, Governance & Policy to lead cyber policy, standards, and culture across DePuy Synthes. You will drive policy management, awareness, and training with executive engagement to embed strong cyber controls across product development, manufacturing, and regulatory functions.

The role requires deep policy expertise, business acumen, and ability to influence senior leaders in a complex, regulated environment. Hybrid work model and global impact.”