Strategic M&A Cybersecurity Deal Lead (Pre-Close)

Johnson & Johnson Co.; Providence (RI); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Johnson & Johnson is seeking a Senior Manager for Information Security Risk Management (ISRM) focusing on Acquisitions & Divestitures. The role leads cybersecurity due diligence for deals, translates findings into risk-informed guidance, and partners with Legal, Privacy, Finance, and deal teams to ensure Day 1 security readiness.

Responsibilities include coordinating diligence across transactions, defining practical mitigations, and guiding post-close integration or separation.

Qualifications

• Bachelor's degree in Information Security, CS, Engineering, IS, Business, or related.
• Advanced degree (MBA, MS) preferred.
• 8+ years of cybersecurity, information risk management, or related experience.
• Experience leading or supporting due diligence for M&A, divestitures, or strategic transactions.
• Strong ability to translate technical findings into business decisions and risk narratives.

Responsibilities

• Lead deal-level cybersecurity due diligence across mergers, acquisitions, divestitures, licensing, minority investments, and partnerships.
• Translate diligence evidence into clear risk insights and practical mitigation recommendations.
• Coordinate with Corporate Development, Legal, Privacy, Finance, Technology Services, and deal teams.
• Manage assessment timelines, evidence needs, and documentation for senior leadership.
• Serve as primary ISRM A&D cybersecurity lead for assigned transactions.

Skills

Cybersecurity

Info risk mgmt

M&A due diligence

Security architecture

Regulatory compliance

Cross-functional collaboration

Project management

Communication skills

Education

Bachelor's degree in Information Security or related

MBA/MS preferred

Job description

Johnson & Johnson is seeking a Senior Manager for Information Security Risk Management (ISRM) focusing on Acquisitions & Divestitures. The role leads cybersecurity due diligence for deals, translates findings into risk-informed guidance, and partners with Legal, Privacy, Finance, and deal teams to ensure Day 1 security readiness.

Responsibilities include coordinating diligence across transactions, defining practical mitigations, and guiding post-close integration or separation.