Sr. Manager, Zero Trust & Architecture

Biopharma Asia; New Brunswick (NJ); Sur place; USD 137 000 - 274 000; Plein temps

Résumé du poste

Johnson & Johnson is seeking a Sr. Manager, Security Architecture and Zero Trust, based in Raritan, NJ or other listed locations.

This leadership role owns the design and execution of the Zero Trust and cyber resiliency strategy across the enterprise. The successful candidate will drive security across OT, networks, endpoints, cloud, data, and AI environments, ensuring every user, device, workload, and dataset is continuously verified and protected while enabling secure digital transformation

Qualifications

• 15+ years of cybersecurity leadership experience in global enterprises
• Experience implementing Zero Trust strategy and architecture in complex environments
• Strong background in multi-cloud and hybrid environments
• Proven ability to lead cross-functional teams and manage large programs

Responsabilités

• Define enterprise Zero Trust strategy, reference architecture, roadmap, and priorities
• Embed Zero Trust controls across OT, networks, endpoints, cloud, applications, and data
• Lead security for AI, data, apps, and secure SDLC
• Own security strategy for OT/manufacturing and regulatory compliance
• Define and implement network segmentation and micro-segmentation

Connaissances

Zero Trust

Cybersecurity leadership

OT security

Cloud security

Network security

Data security

AI security

Vulnerability management

Incident recovery

Formation

Bachelor's degree in Computer Science or related field

Advanced degree preferred

Outils

SASE

ZTNA

CSPM/CNAPP

EDR/XDR

Cloud security tooling

Description du poste

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function

Technology Enterprise Strategy & Security

Job Sub Function

Multi-Family Technology Enterprise Strategy & Security

Job Category

People Leader

All Job Posting Locations

New Brunswick, New Jersey, United States of America, Palm Beach Gardens, Florida, United States of America, Raritan, New Jersey, United States of America, Raynham, Massachusetts, United States of America, Warsaw, Indiana, United States of America, West Chester, Pennsylvania, United States of America

Job Description

DePuy Synthes is recruiting for a Sr. Manager, Security Architecture and Zero Trust located at Raritan, NJ or Palm Beach Gardens, FL or Warsaw, IN or West Chester, PA or Raynham, MA or New Brunswick, NJ.

Job Overview

This leadership role owns the design and execution of DePuy Synthes' Zero Trust and cyber resiliency strategy across the enterprise. The Sr. Manager will drive security across operational technology (OT), networks, endpoints, cloud, and AI, Data & Application environments, ensuring that every user, device, workload, and dataset is continuously verified and protected. This position is critical to protecting sensitive healthcare and MedTech data, enabling secure digital transformation, and building durable, recoverable operations for the standalone company.

Key Responsibilities

Define and lead the enterprise-wide Zero Trust strategy, reference architecture, roadmap, and investment priorities aligned with business, cybersecurity, and regulatory objectives.

Embed Zero Trust principles and controls across operational technology, networks, endpoints, cloud, applications, data, identity, and hardware platforms.

Lead security for AI, data, and application environments, including secure SDLC, code and API security, model integrity, data protection, and secure adoption of AI/ML and GenAI.

Own the security strategy for operational technology and manufacturing environments while supporting production continuity and regulatory compliance.

Define and execute enterprise network segmentation and micro-segmentation to reduce lateral movement across corporate, manufacturing, R&D, and cloud environments.

Lead endpoint and device security across managed, unmanaged, mobile, and specialty devices using modern EDR/XDR, device posture, and conditional access capabilities.

Own multi-cloud security across AWS, Azure, and GCP, including secure landing zones, workload protection, CSPM/CNAPP, guardrails, and automated policy enforcement.

Lead enterprise email security and strengthen protection against phishing, business email compromise, account takeover, malware, and data exfiltration.

Drive cyber and operational resilience through resilient architecture, business continuity and disaster recovery, recovery testing, incident readiness, and executive metrics.

Build and lead a high-performing global cybersecurity team and partner with executives and cross-functional leaders to continuously evolve security priorities and controls.

Qualifications

Education

Bachelor's degree in Computer Science, Information Security, Engineering, or related field required

Advanced degree (e.g., Master's, MBA) preferred

Experience and Skills

Required

15+ years of cybersecurity leadership experience, with deep expertise across multiple domains such as OT security, network security, endpoint protection, cloud security, and application/data security

Proven experience defining and executing Zero Trust strategy and architecture in complex, global enterprise environments

Strong background in vulnerability and exposure management, including risk-based prioritization and remediation at scale

Hands-on knowledge of network segmentation, micro-segmentation, SASE, and ZTNA

Experience securing multi-cloud (AWS, Azure, GCP) and hybrid environments, including CSPM/CNAPP tooling

Demonstrated experience leading cyber resiliency, BCP/DR, and incident recovery programs

Strong leadership, stakeholder management, and cross-functional collaboration skills, including managing global teams

Preferred

Expertise in AI/ML security, data protection, and modern application security (including API and secure SDLC)

Experience in healthcare, MedTech, pharmaceuticals, or other highly regulated industries

Familiarity with global security and resilience frameworks (e.g., NIST CSF, NIST 800-207 Zero Trust, ISO 27001, ISO 22301, CIS, MITRE ATT&CK)

Experience leading security through large-scale transformations, divestitures, or standalone company build-outs

Strong understanding of auditing, monitoring, and compliance across security and resilience controls

Certifications (preferred): GDSA, CISSP, CISM, CCSP, CCSK, or equivalent

Other

Language: English proficiency required

Travel: Up to 15% international and domestic travel

Certifications (preferred): GDSA, CISSP, CISM, CCSP, CCSK, or equivalent

For more information on how we support the whole health of our employees throughout their wellness, career and life journey, please visit www.careers.jnj.com .

Johnson & Johnson announced plans to separate our Orthopaedics business to establish a standalone orthopaedics company, operating as DePuy Synthes. The process of the planned separation is anticipated to be completed within 18 to 24 months, subject to legal requirements, including consultation with works councils and other employee representative bodies, as may be required, regulatory approvals and other customary conditions and approvals. Should you accept this position, it is anticipated that, following conclusion of the transaction, you would be an employee of DePuy Synthes and your employment would be governed by DePuy Synthes employment processes, programs, policies, and benefit plans. In that case, details of any planned changes would be provided to you by DePuy Synthes at an appropriate time and subject to any necessary consultation processes.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers, internal employees contact AskGS to be directed to your accommodation resource.

#LI-Hybrid

#DePuySynthesCareers

Required Skills

Business Alignment, Crisis Management, Cross-Functional Collaboration, Cybersecurity Assessment, Developing Others, Enterprise Application Integration (EAI), Global Market, Inclusive Leadership, Information Security Management System (ISMS), Information Security Risk Management, Information Security Strategic Roadmaps, Information Technology Strategies, Interpersonal Influence, Leadership, Security Administration, Security Architecture Design, Security Monitoring, Team Management

Preferred Skills

Business Alignment, Crisis Management, Cross-Functional Collaboration, Cybersecurity Assessment, Developing Others, Enterprise Application Integration (EAI), Global Market, Inclusive Leadership, Information Security Management System (ISMS), Information Security Risk Management, Information Security Strategic Roadmaps, Information Technology Strategies, Interpersonal Influence, Leadership, Security Administration, Security Architecture Design, Security Monitoring, Team Management

The anticipated base pay range for this position is

137,000.00 - 274,000.00 USD Annual

Additional Description for Pay Transparency

Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)). Subject to the terms of their respective policies and date of hire, employees are eligible for the following time off benefits: Vacation –120 hours per calendar year Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year Holiday pay, including Floating Holidays –13 days per calendar year Work, Personal and Family Time - up to 40 hours per calendar year Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year Caregiver Leave – 80 hours in a 52-week rolling period10 days Volunteer Leave – 32 hours per calendar year Military Spouse Time-Off – 80 hours per calendar year For additional general information on Company benefits, please go to: - https://www.careers.jnj.com/employee-benefits