Senior Cyber & Data Risk Legal Director

Johnson & Johnson Innovative Medicine; Washington; On-site; USD 178,000 - 307,000; Full time

Benefits offered by this job

Long-term incentive program

Retirement plan

Paid time off

Job summary

Johnson & Johnson is seeking a Senior Director, Cyber, Data Risk & Privacy to serve as the principal legal advisor to the CISO and ISRM, guiding cybersecurity, data risk, and AI governance across the enterprise.

You will lead a team within the Global Legal Organization and partner with Enterprise Technology, Privacy, and other stakeholders to balance innovation with regulatory compliance and risk management.

Qualifications

• JD required and admitted to practice law in at least one US jurisdiction.
• Minimum of 12 years of relevant legal experience, including cybersecurity.
• Experience advising senior executives on cybersecurity issues.
• Experience leading legal support during significant cybersecurity incidents or investigations.
• Deep knowledge of global cybersecurity, data protection, critical infrastructure, technology regulation, and AI governance.

Responsibilities

• Serve as the principal legal advisor to the CISO and ISRM Leadership Team.
• Embed legal guidance into strategic technology initiatives and operational decisions.
• Lead legal support for significant cybersecurity incidents, vulnerabilities, and regulatory matters.
• Counsel on regulatory disclosures and interactions with law enforcement and authorities.
• Develop governance frameworks and controls aligned with global legal and regulatory requirements.
• Lead and develop a team of cybersecurity legal professionals.

Skills

Executive communication

Leadership

Strategic thinking

Risk management

Stakeholder management

Negotiation

Collaboration

Education

Juris Doctor (JD)

Job description

Johnson & Johnson is seeking a Senior Director, Cyber, Data Risk & Privacy to serve as the principal legal advisor to the CISO and ISRM, guiding cybersecurity, data risk, and AI governance across the enterprise.

You will lead a team within the Global Legal Organization and partner with Enterprise Technology, Privacy, and other stakeholders to balance innovation with regulatory compliance and risk management.