Senior Manager, M&A Cybersecurity Diligence (Pre-Close)

Johnson & Johnson Co.; Sacramento (CA); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Holiday pay

Parental Leave

Bereavement Leave

401(k)

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures (A&D) Cybersecurity, Pre-Close. You will lead deal-level cybersecurity diligence, translate findings into actionable risk insights, and support risk-informed transaction decisions before close.

As a hands-on leader, you will coordinate with Corporate Development, Legal, Privacy, Finance, and IT teams to ensure Day 1 security priorities, regulatory obligations, and risk-based

Qualifications

• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related disciplines.
• Demonstrated experience leading or materially supporting cybersecurity due diligence, acquisition assessments, divestiture assessments, third-party security reviews, or complex risk assessments in time-sensitive business environments.
• Strong technical background across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, incident response, logging and monitoring, third-party risk, and cyber resilience.

Responsibilities

• Lead deal-level cybersecurity diligence across mergers, acquisitions, divestitures, licensing arrangements, minority investments, and partnerships.
• Translate diligence findings into risk-informed recommendations for near-term and Day 1 priorities.
• Coordinate with Corporate Development, Legal, Privacy, Finance, Technology Services, and external advisors to document findings for deal teams and leadership.
• Evaluate target environments for security controls, regulatory obligations, and integration implications.
• Develop and improve diligence playbooks, risk taxonomies, scoring methods, and handoff criteria.

Skills

Cybersecurity

Information risk management

M&A due diligence

Security architecture

Regulatory compliance

Threat intelligence

Education

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures (A&D) Cybersecurity, Pre-Close. You will lead deal-level cybersecurity diligence, translate findings into actionable risk insights, and support risk-informed transaction decisions before close.

As a hands-on leader, you will coordinate with Corporate Development, Legal, Privacy, Finance, and IT teams to ensure Day 1 security priorities, regulatory obligations, and risk-based