Senior Cybersecurity Deal Lead – Pre-Close & M&A

Johnson & Johnson Co.; Madison (WI); Hybrid; USD 122,000 - 213,000; Full time

Benefits offered by this job

Consolidated retirement plan (pension)

401(k) savings plan

Vacation 120 hours per year

Sick time 40 hours/year (state varies)

Holiday pay 13 days/year

Parental Leave 480 hours/year

Bereavement Leave 240 hours/year

Volunteer Leave 32 hours/year

Military Spouse Time-Off 80 hours/year

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures to lead cybersecurity due diligence for M&A deals. You will serve as a hands-on deal lead driving risk assessment, evidence review, and clear risk conclusions for cross-functional deal teams.

You will translate technical findings into business-focused recommendations, coordinate with Legal, Privacy, Finance, and external advisors, and shape Day 1 security objectives and

Qualifications

• 8+ years of progressive experience in cybersecurity, information risk management, or related fields.
• Experience leading cybersecurity due diligence, acquisition assessments, or divestiture assessments.
• Strong understanding of security architecture, IAM, cloud/infrastructure security, data protection, and incident response.

Responsibilities

• Lead Pre-Close Cybersecurity Due Diligence for assigned transactions and coordinate diligence activities.
• Evaluate target environments across security domains to identify material risks and remediation needs.
• Translate technical findings into business-focused recommendations for risk acceptance and deal protections.
• Provide Day 1 security objectives, TSA considerations, and post-close handoff materials.
• Coordinate with Legal, Privacy, Finance, Technology Services, and external advisors.
• Contribute to playbooks, risk taxonomies, and templates to improve diligence efficiency.
• Mentor and guide junior staff supporting deals.

Skills

Cybersecurity due diligence

M&A transaction support

Security architecture

Risk assessment

Regulatory compliance (HIPAA/GDPR)

Education

Bachelor's degree in Information Security or related

Advanced degree (MBA/MS) preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures to lead cybersecurity due diligence for M&A deals. You will serve as a hands-on deal lead driving risk assessment, evidence review, and clear risk conclusions for cross-functional deal teams.

You will translate technical findings into business-focused recommendations, coordinate with Legal, Privacy, Finance, and external advisors, and shape Day 1 security objectives and