Sr. Program Manager, Cyber Strategy & PMO

Johnson & Johnson MedTech; Town of Florida (NY); On-site; USD 122,000 - 245,000; Full time

Job summary

Johnson & Johnson MedTech is seeking a Sr. Program Manager for Cyber Strategy & PMO to shape the strategic direction of the global cybersecurity function.

You will own the cyber transformation roadmap, governance, and operating model, ensuring alignments to enterprise priorities and regulatory requirements. Responsibilities include executive reporting, budget oversight, and building a high-performing PMO team across locations in the US and India.

Qualifications

• 10–12 years of progressive cybersecurity strategy and PMO/portfolio experience.
• Experience building cyber, technology PMO, and executive reporting.
• Ability to translate multi-year strategy into roadmaps and governance.

Responsibilities

• Develop and lead enterprise Cyber Strategy & Transformation roadmap.
• Own Portfolio & Program Governance across cybersecurity.
• Produce CIO/CISO-ready executive reporting on cyber posture and risks.
• Manage budgets, forecasts, variance analysis, and vendor spend.
• Build PMO standards, playbooks, tools, and cadences for delivery.
• Align cyber priorities with enterprise decision-making across functions.
• Partner with domain leaders to align strategy and roadmaps.
• Lead and mentor a cyber strategy and PMO team across US/India.
• Drive continuous improvement of PMO tools and KPIs.

Skills

Cybersecurity strategy

PMO leadership

Portfolio governance

Executive reporting

IT risk management

Stakeholder management

Education

Bachelor's degree in CS/Info Security/Engineering

Master's in Cybersecurity/IS/MBA

Tools

NIST CSF

ISO 27001

PMO tools

Job description

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function

Job Sub Function

Job Category

All Job Posting Locations:

New Brunswick, New Jersey, United States of America, Palm Beach Gardens, Florida, United States of America, Raynham, Massachusetts, United States of America, Warsaw, Indiana, United States of America, West Chester, Pennsylvania, United States of America

Job Description

DePuy Synthes is recruiting for a(n) Sr. Program Manager, Cyber Strategy & PMO located in New Brunswick, NJ or Palm Beach Gardens, FL or Warsaw, IN or West Chester, PA or Raynham, MA.

The Sr. Program Manager, Cyber Strategy & PMO is a senior cybersecurity leadership role responsible for shaping and driving the strategic direction, governance, and operational discipline of DePuy Synthes' global cybersecurity function. This leader will own the cyber strategy and transformation agenda, portfolio and program governance, and the operating model that enables the cybersecurity organization to deliver at scale. The role plays a critical part in aligning cyber investments to enterprise priorities, ensuring transparent executive reporting, and building the PMO capabilities needed to safeguard patient trust, business continuity, and regulatory compliance. This position reports into the DePuy Synthes Technology organization.

Key Responsibilities

• Support the development and lead execution of the enterprise Cyber Strategy & Transformation roadmap, translating business priorities and threat landscape shifts into a multi‑year plan for the cybersecurity function.
• Own Portfolio & Program Governance across the cybersecurity organization, ensuring initiatives are prioritized, sequenced, and delivered against defined outcomes, budgets, and timelines.
• Drive Executive Reporting & Governance by producing CIO, CISO-ready materials that clearly communicate cyber posture, program health, risks, and value delivered.
• Direct Financial & Resource Management for the cybersecurity function, including annual budget planning, forecasting, variance analysis, vendor spend, and workforce/resource allocation.
• Build and mature the cybersecurity Operating Model & PMO Excellence, establishing standards, playbooks, tools, and cadences that enable consistent, high‑quality delivery across teams and geographies.
• Lead Stakeholder Alignment across IT, Legal, Privacy, Quality, Finance, HR, and Business leaders, ensuring cyber priorities are understood, funded, and embedded into enterprise decision‑making.
• Partner with cybersecurity domain leaders (e.g., Incident Response & Threat, Identity, Product Security) to align strategy, roadmaps, and governance across the function.
• Lead, mentor, and develop a high‑performing cyber strategy and PMO team, including program managers and analysts across US and India locations.
• Drive continuous improvement of PMO tools, processes, KPIs, and reporting to increase transparency, efficiency, and the strategic impact of the cybersecurity organization.

Qualifications

Education:

• Bachelor's degree in Computer Science, Information Security, Business, Engineering, or a related field (required).
• Master's degree in Cybersecurity, Information Systems, or Business Administration (preferred).

Required

Experience and Skills:

• 10-12 years of progressive experience in cybersecurity strategy, technology PMO, program/portfolio management, or IT risk management, including people leadership roles.
• Proven experience building and running a cyber or technology PMO, including portfolio governance, executive reporting, and financial management.
• Demonstrated ability to develop and communicate multi‑year strategy and transformation roadmaps for cybersecurity or broader technology functions.
• Understanding of the cybersecurity domains, and how they connect to enterprise risk and business outcomes.
• Experience working in regulated environments (e.g., healthcare, life sciences, MedTech, or similarly regulated industries).
• Excellent executive communication, storytelling, and stakeholder management skills, with a track record of influencing senior leaders.

Preferred

• Experience supporting global organizations with complex technology environments and distributed delivery models (including GCC/offshore).
• Familiarity with security and control frameworks such as NIST CSF, ISO 27001, or similar standards.
• Experience leading cyber programs through large‑scale transformations (e.g., separations, M&A, ERP or cloud modernization).
• Prior experience managing budgets of meaningful scale, including vendor and workforce spend.
• Certifications such as PMP, PgMP, SAFe, CISM, CISSP, or equivalent.

Other

• Language: English (fluent).
• Travel: Up to 10–15%, primarily domestic with occasional international travel.
• Certifications (preferred): CISSP, CISM, GIAC, or equivalent cybersecurity certifications.

For more information on how we support the whole health of our employees throughout their wellness, career and life journey, please visit www.careers.jnj.com.

Johnson & Johnson announced plans to separate our Orthopaedics business to establish a standalone orthopaedics company, operating as DePuy Synthes. The process of the planned separation is anticipated to be completed within 18 to 24 months, subject to legal requirements, including consultation with works councils and other employee representative bodies, as may be required, regulatory approvals and other customary conditions and approvals. Should you accept this position, it is anticipated that, following conclusion of the transaction, you would be an employee of DePuy Synthes and your employment would be governed by DePuy Synthes employment processes, programs, policies, and benefit plans. In that case, details of any planned changes would be provided to you by DePuy Synthes at an appropriate time and subject to any necessary consultation processes.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers, internal employees contact AskGS to be directed to your accommodation resource.

#DePuySynthesCareers

Required Skills

Preferred Skills:

Analytics Dashboards, Consulting, Customer Alignment, Data Analysis, Developing Others, Information Technology Strategies, Lateral Leadership, Organizing, Process Improvements, Product Portfolio Management, Project Management Methodology (PMM), Project Management Office (PMO), Risk Assessments, Robotic Automation, Strategic Thinking, Technical Credibility, Training People

The anticipated base pay range for this position is :

122,000.00 - 245,000.00 USD Annual

Additional Description For Pay Transparency

• Vacation –120 hours per calendar year
• Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year
• Holiday pay, including Floating Holidays –13 days per calendar year
• Work, Personal and Family Time - up to 40 hours per calendar year
• Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
• Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year
• Caregiver Leave – 80 hours in a 52-week rolling period10 days
• Volunteer Leave – 32 hours per calendar year
• Military Spouse Time-Off – 80 hours per calendar year For additional general information on Company benefits, please go to: - https://www.careers.jnj.com/employee-benefits