M&A Cybersecurity Deal Lead — Pre-Close Risk

Johnson & Johnson Innovative Medicine; Arkansas City (KS); Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Remote work options

Job summary

Johnson & Johnson Innovative Medicine seeks a Senior Manager of Information Security Risk Management for Acquisitions & Divestitures (A&D) Cybersecurity, Pre-Close. You will lead hands-on deal-level assessments, translate evidence into clear risk insights, and guide transaction decisions with cross-functional partners.

With 8+ years in cybersecurity and experience in M&A diligence, you will shape Day 1 security priorities and leverage governance to protect value.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or related field.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, or related disciplines.
• Experience leading cybersecurity due diligence for acquisitions, divestitures, or complex transactions.

Responsibilities

• Lead cybersecurity due diligence for acquisitions, divestitures, licensing, and joint ventures.
• Translate diligence findings into risk insights and actionable recommendations.
• Coordinate with Corporate Development, Legal, Privacy, Finance, Technology Services and deal teams.
• Define Day 1 security priorities and contractual protections.
• Improve diligence playbooks, risk taxonomies, and evidence standards.

Skills

Cybersecurity

Risk management

M&A due diligence

Regulatory compliance

Third-party risk

Stakeholder management

Education

Bachelor's degree in Information Security

MBA or MS preferred

Job description

Johnson & Johnson Innovative Medicine seeks a Senior Manager of Information Security Risk Management for Acquisitions & Divestitures (A&D) Cybersecurity, Pre-Close. You will lead hands-on deal-level assessments, translate evidence into clear risk insights, and guide transaction decisions with cross-functional partners.

With 8+ years in cybersecurity and experience in M&A diligence, you will shape Day 1 security priorities and leverage governance to protect value.