M&A Cybersecurity Deal Lead — Senior Manager

Johnson & Johnson Co.; Charlotte (NC); Remote; USD 150,000 - 210,000; Full time

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management for Acquisitions & Divestitures (A&D) Cybersecurity, Pre-Close. You will lead deal-level assessments, translate findings into risk insights, and coordinate with Corporate Development, Legal, Privacy, Finance, and technology teams to support near-term closing decisions.

You bring 8+ years in cybersecurity and experience in M&A risk, with a strong technical background across security domains.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, or related fields.
• Experience leading cybersecurity due diligence for acquisitions, divestitures, or strategic transactions.
• Ability to translate technical risk into business-focused decisions.

Responsibilities

• Lead deal-level cybersecurity due diligence across mergers, acquisitions, divestitures, licensing arrangements, minority investments, and strategic partnerships.
• Translate diligence evidence into clear risk insights and practical mitigation recommendations.
• Coordinate with Corporate Development, Legal, Privacy, Finance, and Transaction teams to align security with deal objectives.
• Serve as primary ISRM A&D cybersecurity lead for assigned transactions and manage assessment timelines.
• Develop and refine diligence playbooks, questionnaires, and evidence standards to improve speed and consistency.
• Provide guidance to managers and cross-functional contributors supporting deals, ensuring documentation and reporting quality.
• Ensure Day 1 security priorities and TSA considerations are reflected in closing conditions.

Skills

Cybersecurity

M&A due diligence

Risk assessment

Stakeholder communication

Education

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or related

Advanced degree (MBA, MS, or equivalent) preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management for Acquisitions & Divestitures (A&D) Cybersecurity, Pre-Close. You will lead deal-level assessments, translate findings into risk insights, and coordinate with Corporate Development, Legal, Privacy, Finance, and technology teams to support near-term closing decisions.

You bring 8+ years in cybersecurity and experience in M&A risk, with a strong technical background across security domains.