Sr. Manager, Zero Trust & Architecture

6090-Johnson & Johnson Services Inc. Legal Entity; Raritan (NJ); Hybrid; USD 137,000 - 274,000; Full time

Benefits offered by this job

Pension Plan

401(k)

Paid time off 120 hours

Job summary

Johnson & Johnson is seeking a Sr. Manager of Security Architecture and Zero Trust to own the enterprise strategy across OT, networks, cloud, and AI security.

You will drive a resilient, auditable security program and lead a global cybersecurity team, guiding policy, architecture, and incident readiness for a healthcare-focused enterprise. You will work across multi-cloud environments (AWS/Azure/GCP), implement secure SDLC practices, and ensure regulatory alignment.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field required.
• 15+ years of cybersecurity leadership experience across OT, networks, cloud and data security.
• Proven experience defining Zero Trust strategy and architecture in global enterprises.
• Experience securing multi-cloud (AWS, Azure, GCP) and hybrid environments.
• Strong leadership and cross-functional collaboration skills.
• Familiarity with NIST CSF, NIST 800-207 Zero Trust, ISO 27001.
• Willingness to travel up to 15% internationally and domestically.

Responsibilities

• Define and lead the enterprise Zero Trust strategy, architecture and roadmap.
• Embed Zero Trust across OT, networks, endpoints, cloud, and data domains.
• Lead security for AI, data and applications including secure SDLC and APIs.
• Own security for OT and manufacturing while ensuring regulatory compliance.
• Define network segmentation and micro-segmentation across environments.
• Lead endpoint security and device posture across managed and mobile devices.
• Own multi-cloud security across AWS, Azure, GCP with automated policy enforcement.
• Lead enterprise email security and protection against phishing and BEC.
• Drive cyber and operational resilience with BCP/DR and incident readiness.
• Build and lead a global cybersecurity team with cross-functional collaboration.

Skills

Zero Trust Strategy

OT Security

Multi-cloud Security

Leadership

Compliance

AI/ML Security

Education

Bachelor's degree in Computer Science, Information Security, Engineering, or related field

Advanced degree (Master's, MBA) preferred

Tools

EDR/XDR

SASE/ZTNA

CSPM/CNAPP

Job description

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function: Technology Enterprise Strategy & Security Job Sub Function: Multi-Family Technology Enterprise Strategy & Security Job Category: People Leader All Job Posting Locations: New Brunswick, New Jersey, United States of America, Palm Beach Gardens, Florida, United States of America, Raritan, New Jersey, United States of America, Raynham, Massachusetts, United States of America, Warsaw, Indiana, United States of America, West Chester, Pennsylvania, United States of America

Job Description

DePuy Synthes is recruiting for a Sr. Manager, Security Architecture and Zero Trust located at Raritan, NJ or Palm Beach Gardens, FL or Warsaw, IN or West Chester, PA or Raynham, MA or New Brunswick, NJ.

Job Overview

This leadership role owns the design and execution of DePuy Synthes' Zero Trust and cyber resiliency strategy across the enterprise. The Sr. Manager will drive security across operational technology (OT), networks, endpoints, cloud, and AI, Data & Application environments — ensuring that every user, device, workload, and dataset is continuously verified and protected. This position is critical to protecting sensitive healthcare and MedTech data, enabling secure digital transformation, and building durable, recoverable operations for the standalone company.

Key Responsibilities

• Define and lead the enterprise-wide Zero Trust strategy, reference architecture, roadmap, and investment priorities aligned with business, cybersecurity, and regulatory objectives.
• Embed Zero Trust principles and controls across operational technology, networks, endpoints, cloud, applications, data, identity, and hardware platforms.
• Lead security for AI, data, and application environments, including secure SDLC, code and API security, model integrity, data protection, and secure adoption of AI/ML and GenAI.
• Own the security strategy for operational technology and manufacturing environments while supporting production continuity and regulatory compliance.
• Define and execute enterprise network segmentation and micro-segmentation to reduce lateral movement across corporate, manufacturing, R&D, and cloud environments.
• Lead endpoint and device security across managed, unmanaged, mobile, and specialty devices using modern EDR/XDR, device posture, and conditional access capabilities.
• Own multi-cloud security across AWS, Azure, and GCP, including secure landing zones, workload protection, CSPM/CNAPP, guardrails, and automated policy enforcement.
• Lead enterprise email security and strengthen protection against phishing, business email compromise, account takeover, malware, and data exfiltration.
• Drive cyber and operational resilience through resilient architecture, business continuity and disaster recovery, recovery testing, incident readiness, and executive metrics.
• Build and lead a high-performing global cybersecurity team and partner with executives and cross-functional leaders to continuously evolve security priorities and controls.

Qualifications

• Education Bachelor's degree in Computer Science, Information Security, Engineering, or related field required
• Advanced degree (e.g., Master's, MBA) preferred
• 15+ years of cybersecurity leadership experience, with deep expertise across multiple domains such as OT security, network security, endpoint protection, cloud security, and application/data security
• Proven experience defining and executing Zero Trust strategy and architecture in complex, global enterprise environments
• Strong background in vulnerability and exposure management, including risk-based prioritization and remediation at scale
• Hands-on knowledge of network segmentation, micro-segmentation, SASE, and ZTNA
• Experience securing multi-cloud (AWS, Azure, GCP) and hybrid environments, including CSPM/CNAPP tooling
• Demonstrated experience leading cyber resiliency, BCP/DR, and incident recovery programs
• Strong leadership, stakeholder management, and cross-functional collaboration skills, including managing global teams
• Preferred Expertise in AI/ML security, data protection, and modern application security (including API and secure SDLC)
• Experience in healthcare, MedTech, pharmaceuticals, or other highly regulated industries
• Familiarity with global security and resilience frameworks (e.g., NIST CSF, NIST 800-207 Zero Trust, ISO 27001, ISO 22301, CIS, MITRE ATT&CK)
• Experience leading security through large-scale transformations, divestitures, or standalone company build-outs
• Strong understanding of auditing, monitoring, and compliance across security and resilience controls
• Travel: Up to 15% international and domestic travel
• Certifications (preferred): GDSA, CISSP, CISM, CCSP, CCSK, or equivalent
• Other Language: English proficiency required
• Travel: Up to 15% international and domestic travel
• Certifications (preferred): GDSA, CISSP, CISM, CCSP, CCSK, or equivalent

Pay Information

The anticipated base pay range for this position is: 137,000.00 - 274,000.00 USD

Additional Description for Pay Transparency:

Benefits

Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)).

Subject to the terms of their respective policies and date of hire, employees are eligible for the following time off benefits:

• Vacation –120 hours per calendar year
• Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year
• Holiday pay, including Floating Holidays –13 days per calendar year
• Work, Personal and Family Time - up to 40 hours per calendar year
• Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
• Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year
• Caregiver Leave – 80 hours in a 52-week rolling period10 days
• Volunteer Leave – 32 hours per calendar year
• Military Spouse Time-Off – 80 hours per calendar year

For additional general information on Company benefits, please go to: - https://www.careers.jnj.com/employee-benefits

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Our Credo calls on us to respect the dignity of every individual and create an environment for all people to thrive.

Throughout the recruitment process - from application through hiring - we are committed to providing reasonable accommodations/adjustments for qualified candidates with disabilities. If you need support at any stage of the recruitment process, please complete our candidate accommodation request form so we can assist you.

Do Not Sell or Share My Personal Information Limit the Use of My Personal Information

#LI-Hybrid #DePuySynthesCareers