Pre-Close Cybersecurity Deal Lead

Johnson & Johnson Co.; Tallahassee (FL); Hybrid; USD 122,000 - 213,000; Full time

Benefits offered by this job

Vacation and sick time

Parental Leave

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across mergers, divestitures, licensing, and strategic partnerships.

You will translate findings into risk insights, coordinate with legal, privacy, and Corporate Development, and guide Day 1 security readiness and post-close handoff to ensure regulatory and enterprise requirements are met.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation.

Responsibilities

• Lead Pre-Close Cybersecurity Due Diligence as the primary ISRM A&D lead for transactions.
• Evaluate target environments across security domains to identify material risks and remediation needs.
• Translate technical findings into business-focused recommendations and Day 1 considerations.
• Coordinate with Corporate Development, Legal, Privacy, Finance, Technology Services and deal sponsors to align expectations.

Skills

Cybersecurity

M&A due diligence

Risk assessment

Vendor risk management

Education

Bachelor's degree in Information Security/Computer Science

MBA/MS or equivalent preferred

Tools

NIST CSF

ISO 27001

HIPAA/GDPR knowledge

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across mergers, divestitures, licensing, and strategic partnerships.

You will translate findings into risk insights, coordinate with legal, privacy, and Corporate Development, and guide Day 1 security readiness and post-close handoff to ensure regulatory and enterprise requirements are met.