Sr. Manager, Security Architecture & Innovation - R&D

Johnson & Johnson Co.; Raritan (NJ); On-site; USD 122,000 - 211,000; Full time

Job summary

Johnson & Johnson is recruiting a Sr. Manager, Security Architecture & Innovation – R&D in Spring House, PA or Raritan, NJ.

Join Information Security & Risk Management (ISRM) as the lead cybersecurity architect for Innovative Medicine R&D Discovery. You will shape secure science operations across laboratories, OT, and data exchange, applying Zero Trust principles to protect data integrity and regulatory compliance.

Qualifications

• Bachelor’s degree or equivalent experience in technology, cybersecurity, engineering, or computer science.
• At least seven years of multifaceted cybersecurity or technology experience, including security or solution architecture responsibilities.
• Proven success crafting security solutions in R&D laboratory and OT environments.

Responsibilities

• Compose end-to-end security solution architecture. Partner with scientists and tech teams to translate workflows into requirements and designs.
• Develop reference architectures and maintain current/interim/target-state architectures, standards, threat models and guardrails.
• Modernize R&D laboratory and OT security across onboarding, data exchange, automation and access.
• Make Zero Trust practical with identity, asset, application, data, and session controls and least privilege.
• Set the modernization roadmap and recommend vendor-neutral solutions based on risk, value, and operability.

Skills

Solution Architecture

Zero Trust

Security Architecture

OT Security

Education

Bachelor’s degree or equivalent experience in technology, cybersecurity, engineering, computer science

Job description

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Technology Enterprise Strategy & Security

Job Sub Function:

Solution Architecture

Job Category:

People Leader

All Job Posting Locations:

Raritan, New Jersey, United States of America, Spring House, Pennsylvania, United States of America

Job Description:

Johnson & Johnson is recruiting a Sr. Manager, Security Architecture & Innovation – R&D in Spring House, PA or Raritan, NJ.

Join Information Security & Risk Management (ISRM) as the lead cybersecurity architect for Innovative Medicine R&D Discovery. This is an opportunity to shape how breakthrough science operates securely across laboratories, operational technology (OT), clinical supply chain and pilot-plant environments. You will turn complex scientific needs into practical, scalable solutions; modernize laboratory and OT security architecture; and accelerate priorities such as instrument onboarding, secure data exchange, laboratory automation and attributable access. From early discovery through production, you will apply Zero Trust principles while protecting scientific agility, availability, safety, validated state, data integrity and regulatory compliance.

Responsibilities:

• Compose end-to-end security solution architecture. Partner with scientists and technology teams to translate R&D and laboratory workflows into clear requirements, architecture options, proofs of value and production-ready designs.
• Develop reference architectures that scale. Generate, maintain and review current-state, interim and target-state architectures, standards, decision records, threat models, control mappings and implementation patterns.
• Modernize R&D laboratory and OT security. Design risk-tiered asset onboarding, secure instrument connectivity, controlled data exchange, laboratory automation, and secure remote and third-party access.
• Make Zero Trust practical. Apply identity-, asset-, application-, data-, session- and purpose-aware controls, least privilege, continuous verification and micro-segmentation while accommodating legacy and non-agentable equipment.
• Set the modernization roadmap. Strengthen security patterns, assess enterprise capabilities and emerging technologies, test interoperability and failure modes, and recommend vendor-neutral solutions based on risk, value, scalability, cost and operability.
• Serve as a trusted design authority. Lead reviews, maintain traceability from requirements to controls, govern exceptions and resolve material security, risk and operational gaps before implementation.
• Design for sustainable operations. Define ownership, support, monitoring, incident response, lifecycle management, validation, recovery, supplier responsibilities, service levels and production-readiness criteria.
• Unite diverse teams around a shared vision. Align R&D, engineering, Quality, operations, product teams, sites and service providers across network, OT, identity, endpoint, data and laboratory initiatives.
• Demonstrate measurable impact. Establish baselines and communicate architecture adoption, risk reduction, delivery flow, operational health, customer experience and continual-improvement progress.

What Success Looks Like:

• Trusted architecture: 100% of material solutions have an approved architecture, Service Design Package, named owner and documented exceptions before build or production release.
• Reduced exposure: Apply identity-, device- or asset-aware least-privilege controls to at least 90% of new access paths and reduce standing access, unmanaged connectivity and high-risk exceptions each quarter.
• Production confidence: Ensure 100% of releases meet agreed security, monitoring, support, recovery and rollback criteria, with at least 95% of service-level objectives achieved monthly.
• Scalable adoption: Achieve at least 80% reuse of approved patterns and complete at least 85% of agreed improvement actions on time.

What You Will Bring:

• Bachelor’s degree or equivalent experience in technology, cybersecurity, engineering, computer science or a related field.
• At least seven years of multifaceted cybersecurity or technology experience, including security or solution architecture responsibilities.
• Proven success crafting security solutions in R&D laboratory and OT environments.
• Detailed experience generating, maintaining and reviewing reference architectures, standards, decision records, threat models and implementation guardrails.
• Ability to lead architecture from an ambiguous business need through requirements, design, implementation, production transition and lifecycle improvement.
• Solid understanding of Zero Trust, identity and privileged access, segmentation, endpoint and asset security, secure connectivity, cloud integration, data transfer, monitoring and incident-response integration.
• Experience in a highly regulated industry with exposure to robotics, industrial automation or other safety-critical environments.
• Hands‑on familiarity with laboratory systems, scientific instrumentation, robotics, industrial control systems or process automation, plus working knowledge of GxP, IEC 62443, ISA-95 and relevant NIST guidance.
• Strong facilitation and interpersonal skills, with the ability to align scientists, engineers, business partners and senior leaders around practical decisions.
• Relevant certifications are valued, including CISSP-ISSAP, SABSA Chartered Security Architect, TOGAF, AWS Certified Solutions Architect – Professional, Microsoft Certified: Azure Solutions Architect Expert, Google Cloud Professional Cloud Architect, CCSP, GDSA, GICSP, ISA/IEC 62443 Cybersecurity Expert or ISA/IEC 62443 Cybersecurity Risk Assessment Specialist.

Required Skills:

Preferred Skills:

Change Management, Consulting, Cross-Functional Collaboration, Developing Others, Emerging Technologies, Enterprise IT Governance, Execution Focus, Inclusive Leadership, Information Security Management System (ISMS), Information Technology Strategies, IT Architecture, Leadership, Product Configuration, Product Lifecycle Management (PLM), Requirements Analysis, Solution Architecture, Team Management, Technical Credibility

The anticipated base pay range for this position is :

$122,000 - $211,025

Additional Description for Pay Transparency:

Subject to the terms of their respective plans, employees and/or eligible dependents are eligible to participate in the following Company sponsored employee benefit programs: medical, dental, vision, life insurance, short- and long-term disability, business accident insurance, and group legal insurance. Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)). Subject to the terms of their respective policies and date of hire, Employees are eligible for the following time off benefits: Vacation –120 hours per calendar year Sick time - 40 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year Holiday pay, including Floating Holidays –13 days per calendar year Work, Personal and Family Time - up to 40 hours per calendar year Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child Condolence Leave – 30 days for an immediate family member: 5 days for an extended family member Caregiver Leave – 10 days Volunteer Leave – 4 days Military Spouse Time-Off – 80 hours Additional information can be found through the link below. https://www.careers.jnj.com/employee-benefits