Pre-Close M&A Cybersecurity Deal Lead

Johnson & Johnson Innovative Medicine; Muncie (IN); Hybrid; USD 122,000 - 213,000; Full time

Benefits offered by this job

Paid time off

Parental Leave

Retirement plan

Sick leave

Volunteer time off

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures. This hands-on deal lead role drives cybersecurity due diligence across mergers, acquisitions, divestitures, and strategic partnerships, translating findings into actionable risk insights and near-term actions.

You will collaborate with Legal, Privacy, Finance, and external advisors, shaping Day 1 security objectives, TSA considerations, and post-close handoff while

Qualifications

• Bachelor's degree in Information Security, CS, Eng, or related discipline.
• MBA/MS or equivalent preferred.
• 8+ years in cybersecurity, risk management, or M&A security.
• Experience leading cybersecurity due diligence for transactions.
• Knowledge of HIPAA, GDPR, and healthcare regulatory requirements.

Responsibilities

• Lead Pre-Close cybersecurity due diligence for assigned deals.
• Translate findings into risk insights and business recommendations.
• Coordinate with Legal, Privacy, Finance, and external advisors.
• Develop Day 1 objectives and TSA considerations for post-close.
• Improve diligence playbooks, templates, and reporting.

Skills

Cybersecurity due diligence

Information risk management

Security architecture

M&A security

Regulatory compliance

Communication skills

Vendor risk management

Privacy knowledge

Education

Bachelor's degree in Information Security / related field

MBA / MS preferred

Tools

CISSP

CISM

CRISC

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures. This hands-on deal lead role drives cybersecurity due diligence across mergers, acquisitions, divestitures, and strategic partnerships, translating findings into actionable risk insights and near-term actions.

You will collaborate with Legal, Privacy, Finance, and external advisors, shaping Day 1 security objectives, TSA considerations, and post-close handoff while