Senior Manager, Pre-Close Cybersecurity & M&A

Johnson & Johnson Co.; Springfield (IL); Remote; USD 122,000 - 213,000; Full time

Benefits offered by this job

Remote work options

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity diligence across mergers, divestitures, licensing arrangements, minority investments, and strategic partnerships. You will assess target environments, identify material risks, and distill findings into actionable mitigation strategies.

The role requires deep expertise in security architecture, identity management, cloud security, data protection, and

Qualifications

• Bachelor’s degree in information security, CS, engineering, information systems, business, or a related discipline.
• MBA or MS preferred.

Responsibilities

• Lead Pre-Close cybersecurity due diligence for assigned transactions.
• Evaluate security architecture, identity and access management, cloud and infrastructure security across target environments.
• Lead diligence evidence review and translate findings into practical risk conclusions.
• Translate technical findings into business-focused recommendations for Day 1 and closing conditions.
• Coordinate with Legal, Privacy, Finance, Technology Services, and other stakeholders to align expectations.
• Contribute to playbooks, questionnaires, risk taxonomies, and reporting templates.

Skills

Cybersecurity

Security architecture

M&A due diligence

Risk management

Regulatory compliance

Communication

Leadership

Incident response

Education

Bachelor’s degree

MBA/MS preferred

Tools

CISSP

CISM

CRISC

CISA

CCSP

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) for Acquisitions & Divestitures to lead cybersecurity diligence across mergers, divestitures, licensing arrangements, minority investments, and strategic partnerships. You will assess target environments, identify material risks, and distill findings into actionable mitigation strategies.

The role requires deep expertise in security architecture, identity management, cloud security, data protection, and