Senior Manager, A&D Security Strategy & Deals - Remote

Johnson & Johnson Co.; Kansas City (MO); Remote; USD 150,000 - 200,000; Full time

Job summary

Johnson & Johnson is seeking a Senior Manager, A&D Security Strategy, Deal Security, and Operations to lead the Information Security Risk Management Acquisitions & Divestitures portfolio across pre-close and post-close transactions.

You will translate deal priorities and cybersecurity risks into structured plans, drive repeatable processes, playbooks, and reporting, and coordinate with Legal, Privacy, Finance, and business technology teams.

Qualifications

• Bachelor's degree in Information Security, CS, Engineering, IS, Business or related discipline.
• Advanced degree (MBA, MS) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology operations, program management, M&A transaction support, integration/separation, or related disciplines.
• Experience coordinating complex programs or portfolios involving multiple workstreams, stakeholders, vendors, dependencies, timelines, risks, and executive reporting needs.
• Strong understanding of cybersecurity risk management, security controls, vulnerability management, identity and access, endpoint security, cloud and infrastructure considerations, incident response, third-party risk, and data protection concepts.
• Experience supporting acquisitions, divestitures, integrations, separations, licensing arrangements, strategic partnerships, or similarly complex business transformation efforts preferred.
• Strong executive communication skills, including the ability to summarize technical risk, business impact, open decisions, dependencies, and progress for senior stakeholders.
• Ability to coach, guide, and coordinate internal team members, contractors, and cross-functional contributors while promoting consistent delivery practices.
• Experience developing or managing A&D cybersecurity playbooks, operating models, intake workflows, RACI models, risk trackers, reporting templates, or transition governance processes.
• Experience supporting post-close integrations, divestitures, TSA execution, business separation, or transition planning.
• Experience partnering with Corporate Development, Legal, Privacy, Finance, JJT A&D, ISRM capability teams, business technology leaders, external advisors, and managed service providers.
• Experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, or similarly complex global environments.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, PMP, Agile, or equivalent credentials preferred.
• Operates with strong ownership, urgency, and discretion across sensitive acquisitions, divestitures, and strategic transaction activity.
• Builds structure in ambiguous environments by translating complex deal requirements into clear plans, ownership, milestones, and reporting.

Responsibilities

• Manage a comprehensive portfolio of A&D cybersecurity initiatives across pre-close and post-close phases, including timelines, risks, dependencies, workstream status, resource utilization, and portfolio-level reporting.
• Support resource planning, onboarding, project assignment, contractor coordination, and operating rhythms needed to scale the A&D cybersecurity capability across a growing pipeline of active and future transactions.
• Advance deal security initiatives, including service offering awareness, community of practice engagement, deal team education, intake support, and consistent cybersecurity participation across transaction types.
• Maintain executive-level reporting on portfolio performance, risk posture, issue trends, decision needs, and progress against integration and divestiture milestones, with refinements to support diverse deal types.
• Serve as a delivery lead or deputy DRI for selected ISRM post-close integration and divestiture workstreams, helping coordinate plans, owners, dependencies, status, risks, and escalation paths.
• Establish and improve A&D security administrative processes, playbooks, templates, workflows, RACI models, handoff criteria, portfolio routines, and Definition of Done expectations.
• Continuous Improvement: Capture lessons learned from prior integrations and divestitures, update cybersecurity integration playbooks, improve reporting and workflows, and partner across JJT A&D and ISRM teams to strengthen execution quality.
• Risk, Dependency & Issue Management: Track cybersecurity risks, open issues, remediation activities, decision points, and cross-functional dependencies to help ensure timely closure, escalation, or formal acceptance.
• Partner with security, technology, legal, privacy, finance, corporate development, transaction execution, and integration/separation teams to align cybersecurity execution with business priorities and transaction timelines.
• Provide guidance to team members, contractors, project resources, and capability leads in a matrixed environment, supporting performance, onboarding, knowledge sharing, accountability, and consistent delivery practices.

Skills

Cybersecurity

Risk management

Program management

M&A

Education

Bachelor's degree in Information Security/CS/Engineering

Advanced degree preferred (MBA/MS)

Job description

Johnson & Johnson is seeking a Senior Manager, A&D Security Strategy, Deal Security, and Operations to lead the Information Security Risk Management Acquisitions & Divestitures portfolio across pre-close and post-close transactions.

You will translate deal priorities and cybersecurity risks into structured plans, drive repeatable processes, playbooks, and reporting, and coordinate with Legal, Privacy, Finance, and business technology teams.