Senior Manager, Cybersecurity Diligence & M&A

Johnson & Johnson Co.; Little Elm (TX); Hybrid; USD 122,000 - 213,000; Full time

Benefits offered by this job

Vacation time

Sick leave

Holiday pay

Parental leave

Bereavement leave

Volunteer time

Military leave

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures to lead cybersecurity due diligence for mergers, acquisitions, and partnerships. You will translate complex risk signals into actionable recommendations and partner with Legal, Privacy, Finance, and Tech teams to ensure a secure transaction process.

The role requires extensive experience in enterprise security, regulatory knowledge (HIPAA, GDPR), and the ability to drive Day 1

Qualifications

• 8+ years in cybersecurity, information risk management, or related fields.
• Experience leading or supporting cybersecurity due diligence in M&A or related deals.
• Strong knowledge of security architectures, cloud, data protection, and incident response.
• Need ability to translate technical findings into business risk narratives and decisions.

Responsibilities

• Lead Pre-Close Cybersecurity Due Diligence for assigned transactions.
• Assess security architectures across domains and identify material risks.
• Review diligence evidence and consolidate into practical risk conclusions.
• Provide risk-informed recommendations for Day 1 priorities and protections.
• Coordinate with cross-functional stakeholders to align on security requirements.

Skills

Cybersecurity

M&A diligence

Risk management

Stakeholder communication

Governance

Education

Bachelor's in Information Security / CS / Eng

MBA / MS preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures to lead cybersecurity due diligence for mergers, acquisitions, and partnerships. You will translate complex risk signals into actionable recommendations and partner with Legal, Privacy, Finance, and Tech teams to ensure a secure transaction process.

The role requires extensive experience in enterprise security, regulatory knowledge (HIPAA, GDPR), and the ability to drive Day 1