Senior Manager, M&A Cybersecurity & Pre-Close

Johnson & Johnson Co.; Little Rock (AR); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Holiday pay

Parental Leave

Bereavement Leave

Retirement plan (401(k))

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across deals. You will translate findings into risk insights, define mitigations, and support closing decisions with cross-functional partners.

Remote work options may be considered; strong collaboration and clear communication are essential. The role requires extensive experience in cybersecurity, ISRM, and M&A due diligence, with a track

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business or related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related disciplines.
• Experience leading or supporting cybersecurity due diligence, acquisition assessments, divestiture assessments, third-party security reviews, or complex risk assessments in time-sensitive environments.
• Excellent written and verbal communication skills.

Responsibilities

• Lead deal-level cybersecurity due diligence across mergers, acquisitions, divestitures, licensing arrangements, minority investments, and strategic partnerships.
• Translate diligence evidence into risk insights and recommendations to inform risk acceptance and closing conditions.
• Coordinate with Corporate Development, Legal, Privacy, Finance, Technology Services, and other teams to align requirements.
• Serve as the primary ISRM A&D cybersecurity lead for assigned transactions.
• Develop or operate A&D cybersecurity diligence playbooks, questionnaires, control libraries, risk-scoring methods, issue logs, and handoff criteria.

Skills

Cybersecurity

Risk management

M&A due diligence

Communication

Regulatory compliance

Education

Bachelor's degree

Advanced degree preferred

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity due diligence across deals. You will translate findings into risk insights, define mitigations, and support closing decisions with cross-functional partners.

Remote work options may be considered; strong collaboration and clear communication are essential. The role requires extensive experience in cybersecurity, ISRM, and M&A due diligence, with a track