Senior Manager, M&A Cybersecurity Diligence (Pre-Close)

Johnson & Johnson Co.; Georgia; Hybrid; USD 150,000 - 210,000; Full time

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management for Acquisitions & Divestitures to lead cybersecurity due diligence across deals and ensure Day 1 security priorities are understood and addressed.

You will partner with Corporate Development, Legal, Privacy, Finance, and Technology Services to translate technical risk into actionable business decisions, manage timelines, and drive risk-informed closing.

Qualifications

• 8+ years of progressive experience in cybersecurity and risk management.
• Experience leading cybersecurity due diligence for M&A and divestitures.
• Strong technical background across security architecture, cloud, and data protection.
• Excellent written and verbal communication for technical and non-technical audiences.

Responsibilities

• Lead deal-level cybersecurity assessments across mergers, acquisitions, and divestitures.
• Translate findings into risk insights and practical mitigation recommendations.
• Coordinate diligence activities with Corporate Development, Legal, Privacy, and Finance.
• Develop and improve A&D cybersecurity diligence playbooks and evidence standards.

Skills

Cybersecurity

Risk management

M&A due diligence

Communication

Leadership

Education

Bachelor's degree in Information Security or related field

MBA or MS preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management for Acquisitions & Divestitures to lead cybersecurity due diligence across deals and ensure Day 1 security priorities are understood and addressed.

You will partner with Corporate Development, Legal, Privacy, Finance, and Technology Services to translate technical risk into actionable business decisions, manage timelines, and drive risk-informed closing.