Pre-Close Cybersecurity Lead – A&D Diligence

Johnson & Johnson Co.; Austin (TX); Sur place; USD 150 000 - 210 000; Plein temps

Avantages offerts par ce poste

401(k) plan with company match

Competitive time-off policies

Health, vision, dental benefits

Résumé du poste

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures. You will lead deal-level cybersecurity assessments, translate diligence evidence into actionable risk insights, and support risk-informed decisions before close.

You will evaluate target environments across security domains, coordinate with Legal, Privacy, Finance, and Technology Services, and drive practical mitigation recommendations for post-close execution.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related disciplines.
• Demonstrated experience leading or materially supporting cybersecurity due diligence, acquisition assessments, divestiture assessments, third-party security reviews, or complex risk assessments in time-sensitive business environments.
• Strong technical background across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, incident response, logging and monitoring, third-party risk, and cyber resilience.
• Experience translating technical cybersecurity findings into business-focused recommendations, risk narratives, remediation priorities, Day 1 considerations, contractual inputs, and post-close handoff requirements.
• Working knowledge of privacy, legal, regulatory, and enterprise security obligations relevant to healthcare, MedTech, pharmaceutical, manufacturing, or other regulated global environments.
• Exceptional written and verbal communication skills to convey risk and business impact to technical and non-technical audiences.
• Experience serving as a cybersecurity Deal Lead or workstream lead for acquisitions, divestitures, licensing transactions, minority investments, strategic partnerships, or joint ventures.
• Experience developing or operating A&D cybersecurity diligence playbooks, questionnaires, risk scoring methods, issue logs, decision records, and handoff criteria.
• Experience performing outside-in cyber assessments, threat exposure reviews, breach history analysis, vendor risk analysis, or technical architecture reviews in support of transaction diligence.
• Remote work options may be considered on a case-case basis and with approval.

Responsabilités

• Lead deal-level cybersecurity assessments for acquisitions & divestitures and translate diligence evidence into clear risk insights.
• Identify material technical and regulatory concerns and support risk-informed transaction decisions before close.
• Translate technical findings into business-relevant recommendations for Day 1 security priorities and contractual protections.
• Coordinate diligence activities across Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM capability owners, and deal teams.
• Contribute to the continuous improvement of diligence playbooks, questionnaires, risk taxonomies, and reporting templates.

Connaissances

Cybersecurity

Due diligence

Risk management

Stakeholder communication

Formation

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or related

Advanced degree (MBA, MS) preferred

Outils

Security architecture

Cloud and infrastructure security

Description du poste

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures. You will lead deal-level cybersecurity assessments, translate diligence evidence into actionable risk insights, and support risk-informed decisions before close.

You will evaluate target environments across security domains, coordinate with Legal, Privacy, Finance, and Technology Services, and drive practical mitigation recommendations for post-close execution.