Senior Manager, M&A Cybersecurity & Due Diligence

Johnson & Johnson Co.; Sioux Center (IA); Hybrid; USD 122,000 - 213,000; Full time

Benefits offered by this job

Vacation hours

Sick time

Holiday pay

Parental Leave

Bereavement Leave

Volunteer Leave

Family time

Job summary

Johnson & Johnson is seeking a Senior Manager, ISRM Acquisitions & Divestitures Cybersecurity, Pre-Close, to lead deal‑level cybersecurity assessments and translate findings into actionable risk insights for mergers, acquisitions, divestitures, and partnerships.

This role collaborates with Corporate Development, Legal, Privacy, Finance, and Technology Services to ensure Day 1 security priorities are understood and addressed.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.

Responsibilities

• Lead Pre-Close Cybersecurity Due Diligence for assigned transactions and coordinate diligence activities.
• Evaluate target environments across security domains to identify material risks and remediation needs.
• Review cybersecurity questionnaires, prepare meetings, and consolidate evidence into risk conclusions.
• Translate findings into business-focused recommendations for deal decisions and Day 1 priorities.
• Coordinate with stakeholders across Legal, Privacy, Finance, Technology Services and deal teams.
• Translate diligence findings into Day 1 objectives and TSA considerations for post-close handoff.
• Improve diligence playbooks, templates, and reporting for consistency and speed.
• Provide guidance to managers, analysts, advisors, and cross-functional contributors.

Job description

Johnson & Johnson is seeking a Senior Manager, ISRM Acquisitions & Divestitures Cybersecurity, Pre-Close, to lead deal‑level cybersecurity assessments and translate findings into actionable risk insights for mergers, acquisitions, divestitures, and partnerships.

This role collaborates with Corporate Development, Legal, Privacy, Finance, and Technology Services to ensure Day 1 security priorities are understood and addressed.