M&A Cybersecurity Deal Lead (Pre-Close)

Johnson & Johnson Co.; Wisconsin; Remote; USD 122.000 - 213.000; Vollzeit

Zusammenfassung

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across mergers, acquisitions, and strategic partnerships. You will assess target environments, identify material risks, and guide risk-informed decisions before close.

This role requires deep technical expertise across security domains, strong collaboration with Legal, Privacy, Finance, and Corporate Development, and the ability to

Qualifikationen

• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related disciplines.
• Demonstrated experience leading or materially supporting cybersecurity due diligence, acquisition assessments, divestiture assessments, third-party security reviews, or complex risk assessments in time-sensitive environments.
• Strong understanding of privacy, regulatory and enterprise security obligations relevant to healthcare, MedTech, pharmaceutical, manufacturing or other regulated global environments.
• Experience translating technical findings into business-focused recommendations, risk narratives, remediation priorities, Day 1 considerations, contractual inputs, and post-close handoffs.

Aufgaben

• Deal Lead for Pre-Close Cybersecurity Due Diligence: serve as the primary ISRM A&D cybersecurity lead for assigned transactions, coordinating diligence activities and documenting findings for deal teams and leadership.
• Technical Risk Assessment & Analysis: evaluate target environments across security architecture, IAM, cloud, network, endpoint, data protection, vulnerability management, and incident response to identify material risks and gaps.
• Diligence Execution & Evidence Review: lead questionnaire review, meetings prep, outside-in assessment coordination, analysis, and consolidation of evidence into risk conclusions.
• Transaction Risk Decision Support: translate technical findings into business-relevant recommendations for risk acceptance, closing conditions, Day 1 priorities, and post-close actions.
• Stakeholder Coordination & Escalation: align with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM capability owners, and deal sponsors to resolve questions and escalate material risk.
• Pre-Close Readiness & Handoff: produce Day 1 objectives, TSA considerations, risk registers, dependency tracking, and handoff materials for post-close integration or separation.
• Process, Playbook & Reporting Improvement: contribute to diligence playbooks, risk taxonomies, scoring, templates, dashboards, and workflows to improve consistency and speed.
• Team Leadership & Knowledge Sharing: mentor managers and analysts, promote accountability, and ensure consistent use of approved A&D cybersecurity methods.

Kenntnisse

Cybersecurity

Information risk management

M&A due diligence

Security architecture

Identity and access management

Cloud security

Incident response

Regulatory compliance

Communication skills

Ausbildung

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or related discipline

Advanced degree (MBA, MS, or equivalent) preferred

Jobbeschreibung

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across mergers, acquisitions, and strategic partnerships. You will assess target environments, identify material risks, and guide risk-informed decisions before close.

This role requires deep technical expertise across security domains, strong collaboration with Legal, Privacy, Finance, and Corporate Development, and the ability to