Remote Senior Cybersecurity Due Diligence Lead (M&A)

Johnson & Johnson Co.; Florida; Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Holiday pay

Floating holidays –13 days/year

Parental leave

Bereavement leave

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures to lead cybersecurity due diligence for mergers, acquisitions, and divestitures. You will translate technical risk into actionable business guidance and coordinate across Legal, Privacy, Finance, and Corporate Development to ensure Day 1 security readiness.

Remote work options may be considered; 8+ years in cybersecurity and a strong technical background across security domains

Qualifications

• Bachelor's degree in Information Security or related field; MBA/MS preferred.
• 8+ years of progressive cybersecurity/risk management experience.
• Experience leading or supporting cybersecurity due diligence for M&A/divestitures, third-party risk, or similar initiatives.

Responsibilities

• Lead deal-level cybersecurity due diligence across transactions, coordinating evidence collection and risk assessment.
• Translate technical findings into business-focused risk insights and recommendations for deal teams and leadership.
• Coordinate with Corporate Development, Legal, Privacy, Finance, and transaction teams to align on Day 1 security requirements and contingencies.
• Define Day 1 objectives, minimum security expectations, TSA considerations, and post-close handoff criteria.
• Contribute to the improvement of diligence playbooks, risk taxonomies, and evidence standards for faster, consistent assessments.

Skills

Cybersecurity

M&A due diligence

Risk management

Regulatory compliance

Cloud security

Communication

Leadership

Education

Bachelor's degree in Information Security/related

MBA/MS preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures to lead cybersecurity due diligence for mergers, acquisitions, and divestitures. You will translate technical risk into actionable business guidance and coordinate across Legal, Privacy, Finance, and Corporate Development to ensure Day 1 security readiness.

Remote work options may be considered; 8+ years in cybersecurity and a strong technical background across security domains