Pre-Close Cybersecurity Deal Lead (M&A)

Johnson & Johnson Innovative Medicine; Maryland City (MD); Hybrid; USD 122,000 - 213,000; Full time

Benefits offered by this job

401(k) plan

Pension

Paid time off

Job summary

Johnson & Johnson Innovative Medicine seeks a Senior Manager, ISRM Acquisitions & Divestitures Cybersecurity, Pre-Close, to lead deal-level cybersecurity due diligence across M&A, licensing, and strategic partnerships. You will assess target environments, identify material risks, and guide risk-informed decisions before close.

You will collaborate with Corporate Development, Legal, Privacy, Finance, and business technology leaders to ensure Day 1 security priorities and TSA

Qualifications

• Bachelor's degree required in Information Security, CS, Engineering, IS, Business or related.
• MBA/MS or equivalent preferred.
• 8+ years of progression in cybersecurity, risk management or related.
• Experience leading cybersecurity due diligence for M&A/divestitures.
• Strong understanding of frameworks like NIST, ISO 27001, GDPR/HIPAA.

Responsibilities

• Lead Pre-Close cybersecurity due diligence for transactions.
• Evaluate target environments for security architecture, IAM, cloud, data protection, and more.
• Translate findings into business risk insights and remediation priorities.
• Coordinate with Legal, Privacy, Finance, and development teams for Day 1 readiness.
• Mentor and guide ISRM team members and drive playbook improvements.

Skills

Cybersecurity

Information risk management

M&A due diligence

Technical risk assessment

Communication

Stakeholder management

Regulatory compliance

Leading teams

Education

Bachelor's degree in Information Security/CS/Engineering/IS/Business

MBA/MS or equivalent preferred

Tools

NIST CSF

ISO 27001

HIPAA/GDPR knowledge

Job description

Johnson & Johnson Innovative Medicine seeks a Senior Manager, ISRM Acquisitions & Divestitures Cybersecurity, Pre-Close, to lead deal-level cybersecurity due diligence across M&A, licensing, and strategic partnerships. You will assess target environments, identify material risks, and guide risk-informed decisions before close.

You will collaborate with Corporate Development, Legal, Privacy, Finance, and business technology leaders to ensure Day 1 security priorities and TSA