Senior Cybersecurity GRC Lead

Johnson Johnson; New Brunswick (NJ); On-site; USD 120,000 - 180,000; Full time

Job summary

Johnson & Johnson is seeking a seasoned Professional, Compliance Lead in Cybersecurity to drive governance, risk, and regulatory compliance across DePuy Synthes. You will own policy frameworks, risk assessments, and executive reporting, interfacing with Internal Audit, Legal, Privacy, and regulators.

The role demands navigating complex standards and improving cyber risk maturity. Location flexibility includes multiple U.S.

Qualifications

• 6 years of progressive experience in cybersecurity
• Experience leading governance, risk, and compliance initiatives
• Strong knowledge of regulatory obligations and industry frameworks

Responsibilities

• Lead cybersecurity policy and standards program end to end
• Define enterprise cyber risk framework and scoring model
• Direct cyber risk assessment across apps, infra, and processes
• Govern cyber risk register and escalation to leadership
• Coordinate governance forums and executive reporting
• Partner with audit, legal, privacy, and QA teams to align controls

Skills

Cybersecurity

GRC

Risk assessment

Policy development

Regulatory compliance

Stakeholder management

Tools

NIST CSF

ISO 27001

HIPAA

GDPR

FDA cybersecurity guidance

SOX ITGC

Job description

Johnson & Johnson is seeking a seasoned Professional, Compliance Lead in Cybersecurity to drive governance, risk, and regulatory compliance across DePuy Synthes. You will own policy frameworks, risk assessments, and executive reporting, interfacing with Internal Audit, Legal, Privacy, and regulators.

The role demands navigating complex standards and improving cyber risk maturity. Location flexibility includes multiple U.S.