Sr. Manager, Security Architecture & Innovation - R&D

Johnson & Johnson Co.; Spring House (PA); On-site; USD 122,000 - 211,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

Disability benefits

401(k)

Job summary

Johnson & Johnson is seeking a Sr. Manager, Security Architecture & Innovation – R&D, in Spring House, PA or Raritan, NJ. Lead cybersecurity architecture for Innovative Medicine R&D, shaping secure labs, OT, clinical supply chains and pilot plants.

Implement Zero Trust, ensure data integrity, regulatory compliance and scalable security patterns. You will partner with scientists and tech teams to translate needs into practical designs, modernize security, and drive risk-based decisions across

Qualifications

• Bachelor’s degree in technology, cybersecurity, engineering or related field.
• Seven+ years in multifaceted cybersecurity or technology with architecture responsibilities.
• Hands-on familiarity with laboratory systems, robotics, OT or process automation and regulatory guidance.

Responsibilities

• Compose end-to-end security solution architecture for R&D and OT environments.
• Translate R&D laboratory workflows into architecture requirements and production-ready designs.
• Develop reference architectures and maintain standards, threat models and guardrails.
• Modernize R&D laboratory and OT security and enable secure instrument onboarding and data exchange.
• Apply Zero Trust and least privilege across identity, device, data and applications.

Skills

Zero Trust

OT security

Solution architecture

Threat modeling

Governance

Stakeholder alignment

Education

Bachelor’s degree or equivalent experience

Tools

CISSP-ISSAP

TOGAF

Job description

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com

Job Function: Technology Enterprise Strategy & Security

Job Sub Function: Solution Architecture

Job Category: People Leader

All Job Posting Locations:

Raritan, New Jersey, United States of America, Spring House, Pennsylvania, United States of America

Job Description

Johnson & Johnson is recruiting a Sr. Manager, Security Architecture & Innovation – R&D in Spring House, PA or Raritan, NJ. Join Information Security & Risk Management (ISRM) as the lead cybersecurity architect for Innovative Medicine R&D Discovery. This is an opportunity to shape how breakthrough science operates securely across laboratories, operational technology (OT), clinical supply chain and pilot-plant environments. You will turn complex scientific needs into practical, scalable solutions; modernize laboratory and OT security architecture; and accelerate priorities such as instrument onboarding, secure data exchange, laboratory automation and attributable access. From early discovery through production, you will apply Zero Trust principles while protecting scientific agility, availability, safety, validated state, data integrity and regulatory compliance.

Responsibilities

• Compose end-to-end security solution architecture.
• Partner with scientists and technology teams to translate R&D and laboratory workflows into clear requirements, architecture options, proofs of value and production-ready designs.
• Develop reference architectures that scale.
• Generate, maintain and review current-state, interim and target-state architectures, standards, decision records, threat models, control mappings and implementation patterns.
• Modernize R&D laboratory and OT security.
• Design risk-tiered asset onboarding, secure instrument connectivity, controlled data exchange, laboratory automation, and secure remote and third-party access.
• Make Zero Trust practical.
• Apply identity-, asset-, application-, data-, session- and purpose-aware controls, least privilege, continuous verification and micro-segmentation while accommodating legacy and non-agentable equipment.
• Set the modernization roadmap.
• Strengthen security patterns, assess enterprise capabilities and emerging technologies, test interoperability and failure modes, and recommend vendor-neutral solutions based on risk, value, scalability, cost and operability.
• Serve as a trusted design authority.
• Lead reviews, maintain traceability from requirements to controls, govern exceptions and resolve material security, risk and operational gaps before implementation.
• Design for sustainable operations.
• Define ownership, support, monitoring, incident response, lifecycle management, validation, recovery, supplier responsibilities, service levels and production-readiness criteria.
• Unite diverse teams around a shared vision.
• Align R&D, engineering, Quality, operations, product teams, sites and service providers across network, OT, identity, endpoint, data and laboratory initiatives.
• Demonstrate measurable impact.
• Establish baselines and communicate architecture adoption, risk reduction, delivery flow, operational health, customer experience and continual-improvement progress.

What Success Looks Like

• Trusted architecture: 100% of material solutions have an approved architecture, Service Design Package, named owner and documented exceptions before build or production release.
• Reduced exposure: Apply identity-, device- or asset-aware least-privilege controls to at least 90% of new access paths and reduce standing access, unmanaged connectivity and high-risk exceptions each quarter.
• Production confidence: Ensure 100% of releases meet agreed security, monitoring, support, recovery and rollback criteria, with at least 95% of service-level objectives achieved monthly.
• Scalable adoption: Achieve at least 80% reuse of approved patterns and complete at least 85% of agreed improvement actions on time.

What You Will Bring

Bachelor’s degree or equivalent experience in technology, cybersecurity, engineering, computer science or a related field.

• At least seven years of multifaceted cybersecurity or technology experience, including security or solution architecture responsibilities.
• Proven success crafting security solutions in R&D laboratory and OT environments.
• Detailed experience generating, maintaining and reviewing reference architectures, standards, decision records, threat models and implementation guardrails.
• Ability to lead architecture from an ambiguous business need through requirements, design, implementation, production transition and lifecycle improvement.
• Solid understanding of Zero Trust, identity and privileged access, segmentation, endpoint and asset security, secure connectivity, cloud integration, data transfer, monitoring and incident-response integration.
• Experience in a highly regulated industry with exposure to robotics, industrial automation or other safety-critical environments.
• Hands‑on familiarity with laboratory systems, scientific instrumentation, robotics, industrial control systems or process automation, plus working knowledge of GxP, IEC 62443, ISA‑95 and relevant NIST guidance.
• Strong facilitation and interpersonal skills, with the ability to align scientists, engineers, business partners and senior leaders around practical decisions.
• Relevant certifications are valued, including CISSP‑ISSAP, SABSA Chartered Security Architect, TOGAF, AWS Certified Solutions Architect–Professional, Microsoft Certified: Azure Solutions Architect Expert, Google Cloud Professional Cloud Architect, CCSP, GDSA, GICSP, ISA/IEC 62443 Cybersecurity Expert or ISA/IEC 62443 Cybersecurity Risk Assessment Specialist.

Preferred Skills

• Change Management
• Consulting
• Cross-Functional Collaboration
• Developing Others
• Emerging Technologies
• Enterprise IT Governance
• Execution Focus
• Inclusive Leadership
• Information Security Management System (ISMS)
• Information Technology Strategies
• IT Architecture
• Leadership
• Product Configuration
• Product Lifecycle Management (PLM)
• Requirements Analysis
• Solution Architecture
• Team Management
• Technical Credibility

Salary

The anticipated base pay range for this position is : $122,000 - $211,025

Benefits

Subject to the terms of their respective plans, employees and/or eligible dependents are eligible to participate in the following Company sponsored employee benefit programs: medical, dental, vision, life insurance, short- and long-term disability, business accident insurance, and group legal insurance. Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)). Subject to the terms of their respective policies and date of hire, Employees are eligible for the following time off benefits: Vacation –120 hours per calendar year Sick time - 40 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year Holiday pay, including Floating Holidays –13 days per calendar year Work, Personal and Family Time - up to 40 hours per calendar year Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child Condolence Leave – 30 days for an immediate family member: 5 days for an extended family member Caregiver Leave – 10 days Volunteer Leave – 4 days Military Spouse Time-Off – 80 hours Additional information can be found through the link below. https://www.careers.jnj.com/employee-benefits At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at https://www.jnj.com/.

Privacy Notice

Do Not Sell or Share My Personal Information Limit the Use of My Personal Information