Pre-Close Cybersecurity Deal Lead (M&A)

Johnson & Johnson Co.; Columbus (OH); Remote; USD 122,000 - 213,000; Full time

Benefits offered by this job

Vacation and sick time

Parental Leave

Volunteer Leave

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management for Acquisitions & Divestitures. This role leads cybersecurity due diligence for mergers, acquisitions, divestitures, and strategic partnerships, translating technical findings into actionable risk insights and Day 1 security priorities.

You will collaborate with Corporate Development, Legal, Privacy, Finance, and Technology Services, ensuring risk-informed decisions before close while guiding post-close

Qualifications

• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation.
• Strong technical background across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, incident response, logging and monitoring, third-party risk, and cyber resilience.
• Ability to analyze fragmented diligence evidence, identify risk themes, and translate findings into business-focused recommendations and Day 1 considerations.
• Experience in regulated healthcare, MedTech, pharmaceutical, manufacturing, or similarly complex global environments and familiarity with privacy, legal, and enterprise security obligations.

Responsibilities

• Lead Pre-Close Cybersecurity Due Diligence for assigned transactions, coordinating diligence activities and documenting findings for deal teams and leadership.
• Evaluate target environments across security domains to identify material risks, gaps, and remediation needs including integration or separation implications.
• Oversee diligence evidence review, meetings, and coordination with outside advisors, consolidating evidence into practical risk conclusions.
• Translate technical findings into business-relevant recommendations for risk acceptance, contractual protections, and Day 1 priorities.
• Coordinate with multiple stakeholders to align expectations, resolve open questions, and escalate material risk issues through governance channels.
• Translate diligence findings into Day 1 objectives, TSA considerations, risk register entries, and post-close handoff materials.
• Contribute to playbooks, templates, risk taxonomies, dashboards, and evidence standards to improve consistency and speed across deals.
• Provide guidance to managers, analysts, advisors, and cross-functional contributors supporting deals.

Skills

Cybersecurity

M&A due diligence

Risk assessment

Security architecture

Regulatory compliance

Stakeholder management

Communication skills

Education

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business

MBA or MS preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management for Acquisitions & Divestitures. This role leads cybersecurity due diligence for mergers, acquisitions, divestitures, and strategic partnerships, translating technical findings into actionable risk insights and Day 1 security priorities.

You will collaborate with Corporate Development, Legal, Privacy, Finance, and Technology Services, ensuring risk-informed decisions before close while guiding post-close