Senior Security Deal Lead – Pre-Close (M&A)

Johnson & Johnson Co.; Indiana; Hybrid; USD 122,000 - 213,000; Full time

Benefits offered by this job

Pension plan

401(k) plan

Paid time off

Job summary

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures Cybersecurity, Pre-Close. This hands‑on deal lead will drive cybersecurity due diligence for mergers, acquisitions, divestitures, licensing, minority investments, and strategic partnerships.

You will translate diligence findings into practical risk insights, identify material concerns, and support risk‑informed transaction decisions before close.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Engineering, Information Systems, Business, or related.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, or related disciplines.

Responsibilities

• Serve as the primary ISRM A&D cybersecurity lead for assigned transactions, coordinating diligence activities, managing assessment timelines, tracking evidence needs, and ensuring findings are clearly documented for deal teams and leadership.
• Evaluate target environments across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, incident response, third‑party risk, and cyber resilience to identify material risks, control gaps, remediation needs, and integration or separation implications.
• Lead cybersecurity questionnaire review, management meeting preparation, outside‑in assessment coordination, documentation analysis, follow‑up inquiries, advisor engagement, and consolidation of evidence into practical risk conclusions.
• Translate technical findings into business‑relevant recommendations that inform risk acceptance, contractual protections, closing conditions, Day 1 priorities, remediation cost considerations, integration dependencies, and post‑close commitments.
• Partner with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM capability owners, business technology leaders, external advisors, and deal sponsors to align expectations, resolve open questions, and elevate material risk issues through governance channels.
• Translate diligence findings into structured Day 1 objectives, minimum security expectations, TSA considerations, risk register entries, dependency tracking, and handoff materials for post‑close integration or separation execution.
• Contribute to the continuous improvement of diligence playbooks, questionnaires, risk taxonomies, scoring methods, templates, dashboards, reporting routines, intake workflows, and evidence standards.
• Provide guidance to managers, analysts, advisors, and cross‑functional contributors supporting assigned deals while promoting accountability and lessons learned.

Skills

Cybersecurity

M&A Transactions

Risk assessment

Leadership

Education

Bachelor's degree in Information Security/CS/Engineering

MBA/MS preferred

Tools

NIST CSF

ISO 27001

HIPAA knowledge

Job description

Johnson & Johnson is seeking a Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures Cybersecurity, Pre-Close. This hands‑on deal lead will drive cybersecurity due diligence for mergers, acquisitions, divestitures, licensing, minority investments, and strategic partnerships.

You will translate diligence findings into practical risk insights, identify material concerns, and support risk‑informed transaction decisions before close.