Hybrid Director, Global Product Security (Medical Devices)

Johnson & Johnson Co.; Florida; Hybrid; USD 154,000 - 266,000; Full time

Benefits offered by this job

Vacation 120 hours

Sick leave 40 hours

Parental leave 480 hours

Retirement plan

Job summary

Johnson & Johnson is seeking a Director of Product Security in a Hybrid role, based in the USA. You will define and execute the global product security strategy for DePuy Synthes' medical devices and digital products, collaborating with R&D, Quality, Regulatory, and IT to embed cybersecurity across the lifecycle.

The role requires 10–12 years in cybersecurity leadership, experience with medical devices, and strong executive communication.

Qualifications

• 10-12 years in cybersecurity or product security leadership roles with global scope
• Experience securing complex software-enabled or connected medical devices
• Strong knowledge of secure product development and cybersecurity risk management
• Executive-level communication and stakeholder management skills

Responsibilities

• Define and lead the global product security strategy
• Oversee governance, standards and secure development lifecycle across hardware, software and devices
• Partner with R&D, Quality, Regulatory Affairs and IT to integrate cybersecurity risk management
• Lead global teams and external partners delivering product security services and capabilities
• Oversee vulnerability management, threat modeling, penetration testing, and incident response
• Ensure compliance with global cybersecurity and medical device regulations (FDA, ISO, IEC)
• Provide executive-level reporting on product security risks and trends
• Build a strong product security culture through training and continuous improvement

Skills

Cybersecurity leadership

Medical devices security

Executive communication

Global teams

Regulatory compliance

Education

Bachelor's in CS/Engineering

Master's in Cybersecurity

Job description

Johnson & Johnson is seeking a Director of Product Security in a Hybrid role, based in the USA. You will define and execute the global product security strategy for DePuy Synthes' medical devices and digital products, collaborating with R&D, Quality, Regulatory, and IT to embed cybersecurity across the lifecycle.

The role requires 10–12 years in cybersecurity leadership, experience with medical devices, and strong executive communication.