M&A Cybersecurity Deal Lead – Pre-Close

Johnson & Johnson Co.; Ohio; Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Retirement plan

Paid time off & holidays

Flexible work options

Job summary

Johnson & Johnson is seeking a Senior Manager for Information Security Risk Management in Acquisitions & Divestitures. You will lead deal-level cybersecurity due diligence, translate findings into risk insights, and support decision-making prior to close.

The role partners with Legal, Privacy, Finance, and Transaction teams to align requirements and drive Day 1 security priorities. Requires 8+ years in cybersecurity, DSO/ISRM, and experience with M&A diligence, third-party risk, and regulatory

Qualifications

• Experience in cybersecurity risk management, technology delivery, and due diligence.

Responsibilities

• Lead deal-level cybersecurity assessments for acquisitions, divestitures, and partnerships.
• Translate technical findings into business-focused risk conclusions and recommendations.
• Coordinate diligence activities, manage timelines, and document evidence for leadership.
• Develop and improve A&D cybersecurity diligence playbooks, questionnaires, and risk scoring.

Skills

Cybersecurity

M&A due diligence

Risk assessment

Stakeholder management

Education

Bachelor's degree in Information Security/CS/Engineering/IS or Business

MBA preferred

Job description

Johnson & Johnson is seeking a Senior Manager for Information Security Risk Management in Acquisitions & Divestitures. You will lead deal-level cybersecurity due diligence, translate findings into risk insights, and support decision-making prior to close.

The role partners with Legal, Privacy, Finance, and Transaction teams to align requirements and drive Day 1 security priorities. Requires 8+ years in cybersecurity, DSO/ISRM, and experience with M&A diligence, third-party risk, and regulatory