M&A Cybersecurity Lead – Pre-Close Senior Manager

Johnson & Johnson Co.; Saint Paul (MN); Hybrid; USD 122,000 - 213,000; Full time

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures to lead cybersecurity diligence for mergers, acquisitions, licensing, and strategic partnerships. You will serve as the hands-on deal lead, translating evidence into risk insights and guiding decision-makers before close.

You will collaborate with Corporate Development, Legal, Privacy, Finance, and IT teams, evaluate target environments, and define practical mitigations.

Qualifications

• 8+ years in cybersecurity, information risk management, or related fields.
• Experience leading or supporting cybersecurity due diligence in M&A/divestitures.
• Strong knowledge of security frameworks, privacy and regulatory requirements.

Responsibilities

• Lead Pre-Close Cybersecurity Due Diligence for transactions and coordinate activities.
• Evaluate security architecture, identity, cloud, data protection, and third‑party risk.
• Translate findings into business-focused risk recommendations for closing conditions.
• Coordinate with Legal, Privacy, Finance, Technology Services and deal sponsors.
• Define Day 1 objectives, TSA considerations, and handoff materials.

Skills

Cybersecurity

M&A due diligence

Risk assessment

Stakeholder management

Communication

Education

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline

Advanced degree preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures to lead cybersecurity diligence for mergers, acquisitions, licensing, and strategic partnerships. You will serve as the hands-on deal lead, translating evidence into risk insights and guiding decision-makers before close.

You will collaborate with Corporate Development, Legal, Privacy, Finance, and IT teams, evaluate target environments, and define practical mitigations.