M&A Cybersecurity Deal Lead – Pre-Close Risk

Johnson & Johnson Co.; West Virginia; Hybrid; USD 122.000 - 213.000; Vollzeit

Zusammenfassung

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures. This role leads cybersecurity due diligence for mergers, acquisitions, divestitures, and strategic partnerships, translating findings into risk insights and mitigation actions.

You will partner with Corporate Development, Legal, Privacy, and Finance to ensure Day 1 security priorities are defined and handed off for post-close integration.

Qualifikationen

• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related disciplines.
• Demonstrated experience leading or supporting cybersecurity due diligence, acquisition assessments, divestiture assessments, third-party security reviews, or complex risk assessments in time-sensitive environments.
• Strong understanding of cybersecurity frameworks and standards (NIST, ISO27001, GDPR, HIPAA).

Aufgaben

• Lead as the ISRM A&D Cybersecurity Deal Lead for pre-close diligence across transactions.
• Evaluate target environments across security domains to identify material risks and remediation needs.
• Translate findings into business-focused recommendations for Day 1 priorities and close conditions.
• Coordinate with cross-functional teams and external advisors to ensure timely escalation of material risks.
• Contribute to improvement of diligence playbooks, risk taxonomies, and reporting templates.
• Mentor and guide junior analysts supporting deals.

Kenntnisse

Cybersecurity

M&A due diligence

Risk management

Communication

Ausbildung

Bachelor's degree

MBA or MS preferred

Jobbeschreibung

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures. This role leads cybersecurity due diligence for mergers, acquisitions, divestitures, and strategic partnerships, translating findings into risk insights and mitigation actions.

You will partner with Corporate Development, Legal, Privacy, and Finance to ensure Day 1 security priorities are defined and handed off for post-close integration.