Sr. Program Manager, Cyber Strategy & PMO

Johnson & Johnson MedTech; New Brunswick (NJ); On-site; USD 122,000 - 245,000; Full time

Job summary

Johnson & Johnson MedTech seeks a Sr. Program Manager, Cyber Strategy & PMO in the New Brunswick, NJ area.

This senior cybersecurity leadership role shapes and drives strategic direction, governance, and operational discipline for the global cybersecurity function, reporting into the DePuy Synthes Technology organization. You will own the cyber strategy and transformation agenda, portfolio governance, and the PMO operating model to enable secure, compliant, and scalable delivery across teams in

Qualifications

• 10–12 years of progressive experience in cybersecurity strategy, technology PMO, program/portfolio management, or IT risk management, including people leadership roles.
• Proven experience building and running a cyber or technology PMO, including portfolio governance, executive reporting, and financial management.
• Demonstrated ability to develop and communicate multi‑year strategy and transformation roadmaps for cybersecurity or broader technology functions.
• Understanding of the cybersecurity domains, and how they connect to enterprise risk and business outcomes.
• Experience working in regulated environments (e.g., healthcare, life sciences, MedTech, or similarly regulated industries).
• Excellent executive communication, storytelling, and stakeholder management skills, with a track record of influencing senior leaders.

Responsibilities

• Support the development and lead execution of the enterprise Cyber Strategy & Transformation roadmap, translating business priorities and threat landscape shifts into a multi‑year plan for the cybersecurity function.
• Own Portfolio & Program Governance across the cybersecurity organization, ensuring initiatives are prioritized, sequenced, and delivered against defined outcomes, budgets, and timelines.
• Drive Executive Reporting & Governance by producing CIO, CISO-ready materials that clearly communicate cyber posture, program health, risks, and value delivered.
• Direct Financial & Resource Management for the cybersecurity function, including annual budget planning, forecasting, variance analysis, vendor spend, and workforce/resource allocation.
• Build and mature the cybersecurity Operating Model & PMO Excellence, establishing standards, playbooks, tools, and cadences that enable consistent, high‑quality delivery across teams and geographies.
• Lead Stakeholder Alignment across IT, Legal, Privacy, Quality, Finance, HR, and Business leaders, ensuring cyber priorities are understood, funded, and embedded into enterprise decision‑making.
• Partner with cybersecurity domain leaders (e.g., Incident Response & Threat, Identity, Product Security) to align strategy, roadmaps, and governance across the function.
• Lead, mentor, and develop a high‑performing cyber strategy and PMO team, including program managers and analysts across US and India locations.
• Drive continuous improvement of PMO tools, processes, KPIs, and reporting to increase transparency, efficiency, and the strategic impact of the cybersecurity organization.

Skills

Cyber strategy

PMO leadership

Portfolio governance

Executive reporting

Budget management

Education

Bachelor's degree

Master's degree

Job description

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function

Job Sub Function

Job Category

All Job Posting Locations:

New Brunswick, New Jersey, United States of America, Palm Beach Gardens, Florida, United States of America, Raynham, Massachusetts, United States of America, Warsaw, Indiana, United States of America, West Chester, Pennsylvania, United States of America

Job Description

DePuy Synthes is recruiting for a(n) Sr. Program Manager, Cyber Strategy & PMO located in New Brunswick, NJ or Palm Beach Gardens, FL or Warsaw, IN or West Chester, PA or Raynham, MA.

The Sr. Program Manager, Cyber Strategy & PMO is a senior cybersecurity leadership role responsible for shaping and driving the strategic direction, governance, and operational discipline of DePuy Synthes' global cybersecurity function. This leader will own the cyber strategy and transformation agenda, portfolio and program governance, and the operating model that enables the cybersecurity organization to deliver at scale. The role plays a critical part in aligning cyber investments to enterprise priorities, ensuring transparent executive reporting, and building the PMO capabilities needed to safeguard patient trust, business continuity, and regulatory compliance. This position reports into the DePuy Synthes Technology organization.

Key Responsibilities

• Support the development and lead execution of the enterprise Cyber Strategy & Transformation roadmap, translating business priorities and threat landscape shifts into a multi‑year plan for the cybersecurity function.
• Own Portfolio & Program Governance across the cybersecurity organization, ensuring initiatives are prioritized, sequenced, and delivered against defined outcomes, budgets, and timelines.
• Drive Executive Reporting & Governance by producing CIO, CISO-ready materials that clearly communicate cyber posture, program health, risks, and value delivered.
• Direct Financial & Resource Management for the cybersecurity function, including annual budget planning, forecasting, variance analysis, vendor spend, and workforce/resource allocation.
• Build and mature the cybersecurity Operating Model & PMO Excellence, establishing standards, playbooks, tools, and cadences that enable consistent, high‑quality delivery across teams and geographies.
• Lead Stakeholder Alignment across IT, Legal, Privacy, Quality, Finance, HR, and Business leaders, ensuring cyber priorities are understood, funded, and embedded into enterprise decision‑making.
• Partner with cybersecurity domain leaders (e.g., Incident Response & Threat, Identity, Product Security) to align strategy, roadmaps, and governance across the function.
• Lead, mentor, and develop a high‑performing cyber strategy and PMO team, including program managers and analysts across US and India locations.
• Drive continuous improvement of PMO tools, processes, KPIs, and reporting to increase transparency, efficiency, and the strategic impact of the cybersecurity organization.

Qualifications

Education:

• Bachelor's degree in Computer Science, Information Security, Business, Engineering, or a related field (required).
• Master's degree in Cybersecurity, Information Systems, or Business Administration (preferred).

Required

Experience and Skills:

• 10-12 years of progressive experience in cybersecurity strategy, technology PMO, program/portfolio management, or IT risk management, including people leadership roles.
• Proven experience building and running a cyber or technology PMO, including portfolio governance, executive reporting, and financial management.
• Demonstrated ability to develop and communicate multi‑year strategy and transformation roadmaps for cybersecurity or broader technology functions.
• Understanding of the cybersecurity domains, and how they connect to enterprise risk and business outcomes.
• Experience working in regulated environments (e.g., healthcare, life sciences, MedTech, or similarly regulated industries).
• Excellent executive communication, storytelling, and stakeholder management skills, with a track record of influencing senior leaders.

Preferred

• Experience supporting global organizations with complex technology environments and distributed delivery models (including GCC/offshore).
• Familiarity with security and control frameworks such as NIST CSF, ISO 27001, or similar standards.
• Experience leading cyber programs through large‑scale transformations (e.g., separations, M&A, ERP or cloud modernization).
• Prior experience managing budgets of meaningful scale, including vendor and workforce spend.
• Certifications such as PMP, PgMP, SAFe, CISM, CISSP, or equivalent.

Other

• Language: English (fluent).
• Travel: Up to 10–15%, primarily domestic with occasional international travel.
• Certifications (preferred): CISSP, CISM, GIAC, or equivalent cybersecurity certifications.

For more information on how we support the whole health of our employees throughout their wellness, career and life journey, please visit www.careers.jnj.com.

Johnson & Johnson announced plans to separate our Orthopaedics business to establish a standalone orthopaedics company, operating as DePuy Synthes. The process of the planned separation is anticipated to be completed within 18 to 24 months, subject to legal requirements, including consultation with works councils and other employee representative bodies, as may be required, regulatory approvals and other customary conditions and approvals. Should you accept this position, it is anticipated that, following conclusion of the transaction, you would be an employee of DePuy Synthes and your employment would be governed by DePuy Synthes employment processes, programs, policies, and benefit plans. In that case, details of any planned changes would be provided to you by DePuy Synthes at an appropriate time and subject to any necessary consultation processes.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers, internal employees contact AskGS to be directed to your accommodation resource.

#DePuySynthesCareers

Required Skills

Preferred Skills:

Analytics Dashboards, Consulting, Customer Alignment, Data Analysis, Developing Others, Information Technology Strategies, Lateral Leadership, Organizing, Process Improvements, Product Portfolio Management, Project Management Methodology (PMM), Project Management Office (PMO), Risk Assessments, Robotic Automation, Strategic Thinking, Technical Credibility, Training People

The anticipated base pay range for this position is :

122,000.00 - 245,000.00 USD Annual

Additional Description For Pay Transparency

• Vacation –120 hours per calendar year
• Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year
• Holiday pay, including Floating Holidays –13 days per calendar year
• Work, Personal and Family Time - up to 40 hours per calendar year
• Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
• Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year
• Caregiver Leave – 80 hours in a 52-week rolling period10 days
• Volunteer Leave – 32 hours per calendar year
• Military Spouse Time-Off – 80 hours per calendar year For additional general information on Company benefits, please go to: - https://www.careers.jnj.com/employee-benefits