Pre-Close ISRM A&D Cybersecurity Lead

Johnson & Johnson Co.; Portland (ME); Hybrid; USD 122,000 - 213,000; Full time

Benefits offered by this job

Vacation time

Sick leave

Parental leave

Holiday pay

Volunteer leave

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management for Acquisitions & Divestitures. This role leads cybersecurity due diligence for mergers, acquisitions, divestitures, licensing, and strategic partnerships, partnering with Legal, Privacy, Finance, and Technology Services.

You will assess target-state environments, translate findings into risk insights, identify material regulatory concerns, and define mitigation strategies for Day 1 and beyond in a fast-paced

Qualifications

• 8+ years of progressive cybersecurity, risk management, or related experience.
• Experience leading or supporting cybersecurity due diligence in M&A/transactions.
• Strong communication of risk and business impact to diverse audiences.

Responsibilities

• Lead Pre-Close cybersecurity due diligence for mergers, acquisitions, divestitures, and similar transactions.
• Translate technical findings into business risk insights and remediation priorities.
• Coordinate with legal, privacy, finance, and developer teams to ensure Day 1 readiness and post-close handoff.

Skills

Cybersecurity

Information risk management

M&A due diligence

Leadership

Communication

Risk assessment

Regulatory knowledge

Security architecture

Cloud security

Identity & access management

Education

Bachelor's degree in Information Security/CS/Engineering/IS/Business

Advanced degree preferred

Tools

NIST Framework

ISO 27001

GDPR/HIPAA knowledge

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management for Acquisitions & Divestitures. This role leads cybersecurity due diligence for mergers, acquisitions, divestitures, licensing, and strategic partnerships, partnering with Legal, Privacy, Finance, and Technology Services.

You will assess target-state environments, translate findings into risk insights, identify material regulatory concerns, and define mitigation strategies for Day 1 and beyond in a fast-paced