[Hiring] Senior Manager, A&D Security Operations @Johnson & Johnson Innovative Medicine

Role Description

The Senior Manager, A&D Security Strategy, Deal Security, and Operations supports the Information Security Risk Management Acquisitions & Divestitures cybersecurity capability across a growing global portfolio of integrations, divestitures, separations, licensing arrangements, minority investments, and strategic partnerships.

This role provides operational leadership for A&D cybersecurity portfolio execution, capability resourcing, deal security engagement, executive reporting, playbook maturity, and post-close workstream coordination. The position translates deal priorities, cybersecurity risks, integration requirements, and transition dependencies into structured plans, repeatable processes, and clear reporting that enable timely decisions and consistent execution across concurrent transactions.

The Senior Manager partners closely with A&D cybersecurity leadership, JJT A&D, ISRM capability owners, Corporate Development, Legal, Privacy, Finance, IMO/SMO teams, integration leads, business technology teams, and external providers to strengthen deal security coverage, improve portfolio visibility, mature operational processes, and support secure transaction outcomes.

Key Responsibilities

• A&D Cybersecurity Portfolio Operations: Manage a comprehensive portfolio of A&D cybersecurity initiatives across pre-close and post-close phases, including timelines, risks, dependencies, workstream status, resource utilization, and portfolio-level reporting.
• Capability Resourcing & Oversight: Support resource planning, onboarding, project assignment, contractor coordination, and operating rhythms needed to scale the A&D cybersecurity capability across a growing pipeline of active and future transactions.
• Deal Security Enablement: Advance deal security initiatives, including service offering awareness, community of practice engagement, deal team education, intake support, and consistent cybersecurity participation across transaction types.
• Reporting, Governance & Executive Visibility: Maintain executive-level reporting on portfolio performance, risk posture, issue trends, decision needs, and progress against integration and divestiture milestones, with refinements to support diverse deal types.
• Post-Close Workstream Coordination: Serve as a delivery lead or deputy DRI for selected ISRM post-close integration and divestiture workstreams, helping coordinate plans, owners, dependencies, status, risks, and escalation paths.
• Process Standardization & Operational Maturity: Establish and improve A&D security administrative processes, playbooks, templates, workflows, RACI models, handoff criteria, portfolio routines, and Definition of Done expectations.
• Continuous Improvement: Capture lessons learned from prior integrations and divestitures, update cybersecurity integration playbooks, improve reporting and workflows, and partner across JJT A&D and ISRM teams to strengthen execution quality.
• Risk, Dependency & Issue Management: Track cybersecurity risks, open issues, remediation activities, decision points, and cross-functional dependencies to help ensure timely closure, escalation, or formal acceptance.
• Cross-Functional Collaboration: Partner with security, technology, legal, privacy, finance, corporate development, transaction execution, and integration/separation teams to align cybersecurity execution with business priorities and transaction timelines.
• Team Leadership & Development: Provide guidance to team members, contractors, project resources, and capability leads in a matrixed environment, supporting performance, onboarding, knowledge sharing, accountability, and consistent delivery practices.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, technology operations, program management, M&A transaction support, integration/separation, or related disciplines.
• Experience coordinating complex programs or portfolios involving multiple workstreams, stakeholders, vendors, dependencies, timelines, risks, and executive reporting needs.
• Demonstrated ability to translate cybersecurity, technology, and business requirements into actionable operating plans, status reporting, governance routines, and measurable outcomes.
• Strong understanding of cybersecurity risk management, security controls, vulnerability management, identity and access, endpoint security, cloud and infrastructure considerations, incident response, third-party risk, and data protection concepts.
• Experience supporting acquisitions, divestitures, integrations, separations, licensing arrangements, strategic partnerships, or similarly complex business transformation efforts preferred.
• Ability to operate effectively in a highly matrixed global environment, influence without direct authority, and maintain accountability across cross-functional teams.
• Strong executive communication skills, including the ability to summarize technical risk, business impact, open decisions, dependencies, and progress for senior stakeholders.
• Experience improving operational processes, playbooks, workflow tools, reporting mechanisms, dashboards, or portfolio governance practices.
• Demonstrated judgment handling sensitive transaction information, confidentiality requirements, time-sensitive issues, and ambiguous operating conditions.
• Ability to coach, guide, and coordinate internal team members, contractors, and cross-functional contributors while promoting consistent delivery practices.

Preferred Experience

• Experience developing or managing A&D cybersecurity playbooks, operating models, intake workflows, RACI models, risk trackers, reporting templates, or transition governance processes.
• Experience supporting post-close integrations, divestitures, TSA execution, business separation, or transition planning.
• Experience partnering with Corporate Development, Legal, Privacy, Finance, JJT A&D, ISRM capability teams, business technology leaders, external advisors, and managed service providers.
• Experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, or similarly complex global environments.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, PMP, Agile, or equivalent credentials preferred.

Leadership Expectations

• Operates with strong ownership, urgency, and discretion across sensitive acquisitions, divestitures, and strategic transaction activity.
• Builds structure in ambiguous environments by translating complex deal requirements into clear plans, ownership, milestones, and reporting.
• Balances transaction speed with cybersecurity risk management, enterprise policy expectations, resource constraints, and business continuity needs.
• Drives operational maturity through repeatable processes, practical playbooks, data-driven reporting, lessons learned, and continuous improvement.
• Creates a collaborative, accountable team environment that supports knowledge sharing, contractor integration, capability growth, and high-quality execution.

Benefits

• Vacation – 120 hours per calendar year
• Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado – 48 hours per calendar year; for employees who reside in the State of Washington – 56 hours per calendar year
• Holiday pay, including Floating Holidays – 13 days per calendar year
• Work, Personal and Family Time - up to 40 hours per calendar year
• Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
• Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year
• Caregiver Leave – 80 hours in a 52-week rolling period
• Volunteer Leave – 32 hours per calendar year
• Military Spouse Time-Off – 80 hours per calendar year