M&A Cybersecurity Deal Lead – Pre-Close Security

Johnson & Johnson Co.; Virginia; Remote; USD 122,000 - 213,000; Full time

Benefits offered by this job

Retirement plan

Paid time off

Parental Leave

Volunteer Leave

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead pre-close cybersecurity due diligence. You will evaluate target environments, identify material risks, and translate findings into actionable risk guidance.

Responsibilities span coordination with Corporate Development, Legal, Privacy, Finance, and deal teams. You will mentor analysts, drive evidence review, and shape Day 1 security priorities while ensuring

Qualifications

• 8+ years in cybersecurity, risk management, or related fields.
• Experience leading or supporting due diligence in merger/acquisition contexts.
• Ability to translate technical findings into business risk narratives.

Responsibilities

• Lead pre-close cybersecurity due diligence for assigned transactions.
• Assess target environments across security domains and identify material risks.
• Coordinate evidence review, prepare management-ready findings, and support deal decisions.

Skills

Cybersecurity risk assessment

M&A due diligence

Stakeholder communication

Risk mitigation

Security architecture

Education

Bachelor's degree in Information Security or related field

MBA or MS preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead pre-close cybersecurity due diligence. You will evaluate target environments, identify material risks, and translate findings into actionable risk guidance.

Responsibilities span coordination with Corporate Development, Legal, Privacy, Finance, and deal teams. You will mentor analysts, drive evidence review, and shape Day 1 security priorities while ensuring