Remote-Eligible Cybersecurity Deal Lead for Pre-Close M&A

Johnson & Johnson Co.; Montana; On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Holiday pay

Parental Leave

Consolidated retirement plan (pension)

401(k) savings plan

Job summary

Johnson & Johnson is seeking a Senior Manager for Information Security Risk Management in Acquisitions & Divestitures to lead cybersecurity diligence across deals. You will translate technical evidence into risk insights, identify material concerns, and support decision-making before close with cross-functional partners.

You will guide security integration, drive playbook improvements, and ensure Day 1 security priorities are reflected in transaction outcomes and post-close plans.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation.
• Demonstrated experience leading or materially supporting cybersecurity due diligence, acquisition assessments, divestiture assessments, third-party security reviews, or complex risk assessments.
• Strong technical background across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, incident response.

Responsibilities

• Lead deal-level cybersecurity assessments, translating diligence evidence into clear risk insights, identifying material technical and regulatory concerns, and supporting risk-informed transaction decisions before close.
• Translate diligence findings into structured Day 1 objectives, minimum security expectations, TSA considerations, risk register entries, dependency tracking, and handoff materials for post-close integration or separation execution.
• Partner with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM capability owners, business technology teams, external advisors, and deal sponsors to align expectations and escalate material risk issues.
• Contribute to the continuous improvement of diligence playbooks, questionnaires, risk taxonomies, scoring methods, templates, dashboards, reporting routines, intake workflows, and evidence standards.

Education

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline

Job description

Johnson & Johnson is seeking a Senior Manager for Information Security Risk Management in Acquisitions & Divestitures to lead cybersecurity diligence across deals. You will translate technical evidence into risk insights, identify material concerns, and support decision-making before close with cross-functional partners.

You will guide security integration, drive playbook improvements, and ensure Day 1 security priorities are reflected in transaction outcomes and post-close plans.