Remote-Eligible Pre-Close Cybersecurity Lead

Johnson & Johnson Co.; Bristol (RI); Hybrid; USD 122,000 - 213,000; Full time

Job summary

Johnson & Johnson is seeking a Senior Manager for ISRM Acquisitions & Divestitures to lead cybersecurity due diligence across transactions. You will assess target environments, identify material risks, and translate findings into risk‑based recommendations for deal teams and leadership.

You will partner with Corporate Development, Legal, Privacy, Finance and IT to ensure Day 1 security priorities are defined, documented, and handed off for post‑close integration or separation.

Qualifications

• 8+ years of progressive experience in cybersecurity and information risk management.
• Experience leading or supporting cybersecurity due diligence for M&A transactions.
• Strong understanding of security architecture, cloud and data protection.

Responsibilities

• Deal Lead for Pre-Close cybersecurity due diligence and coordination of assessment timelines.
• Evaluate target environments across security domains and identify material risks.
• Lead evidence review, prepare questionnaires, and consolidate findings into risk conclusions.
• Translate technical findings into business‑focused recommendations for deal decisions and Day 1 priorities.
• Coordinate with Corporate Development, Legal, Privacy, Finance, and IT for risk alignment and governance.
• Handoff readiness materials for post‑close integration or separation.

Skills

Cybersecurity

Information Security Risk Management

M&A Due Diligence

Security Architecture

Leadership

Communication

Education

Bachelor's degree in Information Security or related

Advanced degree preferred

Job description

Johnson & Johnson is seeking a Senior Manager for ISRM Acquisitions & Divestitures to lead cybersecurity due diligence across transactions. You will assess target environments, identify material risks, and translate findings into risk‑based recommendations for deal teams and leadership.

You will partner with Corporate Development, Legal, Privacy, Finance and IT to ensure Day 1 security priorities are defined, documented, and handed off for post‑close integration or separation.