M&A Cybersecurity Deal Lead — Pre-Close

Johnson & Johnson Co.; Eagle (ID); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Holiday pay

Parental Leave

Bereavement Leave

Job summary

Johnson & Johnson is seeking a Senior Manager of Information Security Risk Management for Acquisitions & Divestitures to lead cybersecurity due diligence across deals. You will translate technical findings into business risk insights, coordinate with Corporate Development, Legal, Privacy, Finance, and Technology Services, and guide risk-informed closing decisions.

The role requires 8+ years in cybersecurity and M&A risk, with strong expertise in security architecture, cloud, and third-party

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Engineering, Information Systems, Business or related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related disciplines.
• Demonstrated experience leading or supporting cybersecurity due diligence, acquisition/divestiture assessments, third-party security reviews, or complex risk assessments.
• Strong technical background across security architecture, identity and access management, cloud and infrastructure security, and data protection.

Responsibilities

• Lead deal-level cybersecurity assessments across mergers, acquisitions, divestitures, licensing arrangements, minority investments, and partnerships.
• Translate diligence findings into risk insights and practical mitigation recommendations for deal teams and leadership.
• Coordinate with Corporate Development, Legal, Privacy, Finance, and Technology Services to align requirements and decision-making.
• Develop Day 1 objectives, minimum security expectations, TSA considerations, and post-close handoff criteria.
• Contribute to improved diligence playbooks, questionnaires, and evidence standards for faster transaction execution.

Skills

Cybersecurity

Risk management

M&A due diligence

Business risk translation

Stakeholder communication

Education

Bachelor's degree in Information Security/Computer Science/Engineering/Information Systems/Business

MBA/MS preferred

Job description

Johnson & Johnson is seeking a Senior Manager of Information Security Risk Management for Acquisitions & Divestitures to lead cybersecurity due diligence across deals. You will translate technical findings into business risk insights, coordinate with Corporate Development, Legal, Privacy, Finance, and Technology Services, and guide risk-informed closing decisions.

The role requires 8+ years in cybersecurity and M&A risk, with strong expertise in security architecture, cloud, and third-party