Pre-Close Cybersecurity Senior Manager – M&A Risk

Johnson & Johnson Co.; Spruance City (DE); On-site; USD 150,000 - 230,000; Full time

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence before close. You will assess target environments, translate evidence into risk insights, and identify regulatory concerns to inform Day 1 security priorities.

You will partner with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM policy owners, and transaction teams to ensure risks are understood and mitigated

Qualifications

• Strong cybersecurity due diligence and risk assessment experience.
• Experience working with cross-functional deal teams (Legal, Privacy, Finance).
• Ability to translate diligence evidence into actionable risk insights.

Responsibilities

• Lead deal-level cybersecurity assessments for M&A, divestitures, licensing, and partnerships.
• Translate diligence evidence into clear risk insights and recommended mitigations.
• Collaborate with Corporate Development, Legal, Privacy, Finance, IT, and transaction teams to ensure Day 1 security priorities are addressed.

Skills

Cybersecurity

Due diligence

Risk management

Stakeholder leadership

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence before close. You will assess target environments, translate evidence into risk insights, and identify regulatory concerns to inform Day 1 security priorities.

You will partner with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM policy owners, and transaction teams to ensure risks are understood and mitigated