Remote Data Security Leader

Johnson & Johnson Innovative Medicine; Raritan (NJ); Hybrid; USD 117,000 - 201,000; Full time

Job summary

Johnson & Johnson is recruiting a Data Security Manager - Information Security & Risk Management (ISRM). This role may be based in the Raritan, NJ office or remote in the U.S., with periodic travel to the Raritan site.

You will lead the enterprise Data Protection Program, govern data security controls, assess risks, and partner with cross-functional teams to implement risk-based protections and measurable program metrics.

Qualifications

• BA/BS degree in IT security or related field required.
• 6+ years in IT security management or IT roles.
• 2+ years in data security (governance, labeling, etc.).
• Strong communication and cross-functional collaboration.
• Certifications preferred (CISM, CISSP, CISA, CRISC).

Responsibilities

• Lead the enterprise Data Protection Program, including governance, operating processes, service oversight, metrics, reporting, and continuous improvement.
• Own Data Protection exception management, including USB, webmail, file-sharing, Trusted Computing, Secure Data Transfer and other approved service exceptions.
• Assess exception requests and coordinate risk reviews, approvals, remediation actions, and lifecycle management.
• Reduce exception volume through secure alternatives, enhanced controls, user education, process optimization, and automation.
• Partner with EUS, ISRM teams, Compliance, Privacy, Legal, HR, and business partners to design and implement risk-based data protection controls.
• Define, monitor, and report program performance metrics, exception trends, risk themes, and executive-level insights.

Skills

IT Security Management

Data Security

Threat Assessment

Governance & Compliance

Stakeholder Collaboration

Security Architecture

Education

BA/BS in IT or related field

Job description

Johnson & Johnson is recruiting a Data Security Manager - Information Security & Risk Management (ISRM). This role may be based in the Raritan, NJ office or remote in the U.S., with periodic travel to the Raritan site.

You will lead the enterprise Data Protection Program, govern data security controls, assess risks, and partner with cross-functional teams to implement risk-based protections and measurable program metrics.