M&A Cybersecurity Deal Lead – Pre-Close

Johnson & Johnson Co.; Idaho; Remote; USD 150,000 - 220,000; Full time

Benefits offered by this job

Floating holidays

Parental leave

Bereavement leave

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across transactions. You will translate technical findings into risk conclusions and coordinate with Corporate Development, Legal, Privacy, Finance, and IT teams to ensure Day 1 security readiness.

The role requires deep expertise in security architecture, cloud and data protection, and third-party risk, with 8+ years in related fields.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation.

Responsibilities

• Lead deal-level cybersecurity assessments and translate diligence evidence into clear risk insights.
• Identify material technical and regulatory concerns and support risk-informed transaction decisions before close.
• Partner with Corporate Development, Legal, Privacy, Finance, Technology Services and other teams to align expectations and escalate material risk issues.
• Translate diligence findings into structured Day 1 objectives, minimum security expectations and post-close handoff materials.
• Contribute to the improvement of diligence playbooks, questionnaires and risk taxonomies.

Skills

Cybersecurity

M&A due diligence

Risk management

Communication skills

Stakeholder management

Education

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or related discipline

Advanced degree (MBA, MS) preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across transactions. You will translate technical findings into risk conclusions and coordinate with Corporate Development, Legal, Privacy, Finance, and IT teams to ensure Day 1 security readiness.

The role requires deep expertise in security architecture, cloud and data protection, and third-party risk, with 8+ years in related fields.