[Hiring] Senior Manager, Information Security Risk Management @Johnson & Johnson Innovative Medicine

Role Description

The Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures (A&D) Cybersecurity, Pre-Close, reports directly to the Director, ISRM A&D Cybersecurity, Pre-Close and serves as a hands-on Deal Lead for cybersecurity due diligence across mergers, acquisitions, divestitures, licensing arrangements, minority investments, and strategic partnerships.

This role is responsible for leading deal-level cybersecurity assessments, translating diligence evidence into clear risk insights, identifying material technical and regulatory concerns, and supporting risk-informed transaction decisions before close.

The Senior Manager partners with various teams to ensure cybersecurity risks, enterprise requirements, and Day 1 security priorities are understood, documented, escalated, and transitioned to post-close execution teams.

Key Responsibilities

• Deal Lead for Pre-Close Cybersecurity Due Diligence:
  • Serve as the primary ISRM A&D cybersecurity lead for assigned transactions.
  • Coordinate diligence activities, manage assessment timelines, and track evidence needs.
  • Ensure findings are clearly documented for deal teams and leadership.
• Technical Risk Assessment & Analysis:
  • Evaluate target environments across various security domains.
  • Identify material risks, control gaps, remediation needs, and integration or separation implications.
• Diligence Execution & Evidence Review:
  • Lead cybersecurity questionnaire review and management meeting preparation.
  • Coordinate documentation analysis and follow-up inquiries.
  • Engage advisors and consolidate evidence into practical risk conclusions.
• Transaction Risk Decision Support:
  • Translate technical findings into business-relevant recommendations.
  • Inform risk acceptance, contractual protections, and post-close commitments.
• Stakeholder Coordination & Escalation:
  • Partner with various teams to align expectations and resolve open questions.
  • Escalate material risk issues through the Director and appropriate governance channels.
• Pre-Close Readiness & Handoff:
  • Translate diligence findings into structured Day 1 objectives and handoff materials.
• Process, Playbook & Reporting Improvement:
  • Contribute to the continuous improvement of diligence playbooks and reporting routines.
• Team Leadership & Knowledge Sharing:
  • Provide guidance to managers and analysts supporting assigned deals.
  • Promote accountability and consistent use of approved A&D cybersecurity methods.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
• Advanced degree (MBA, MS, or equivalent) preferred.
• 8+ years of progressive experience in cybersecurity, information risk management, or related disciplines.
• Demonstrated experience leading or supporting cybersecurity due diligence and complex risk assessments.
• Strong technical background across various security domains.
• Ability to analyze fragmented or incomplete diligence evidence.
• Experience translating technical cybersecurity findings into business-focused recommendations.
• Working knowledge of privacy, legal, regulatory, and enterprise security obligations.
• Strong understanding of recognized cybersecurity frameworks and standards.
• Experience coordinating multiple workstreams and stakeholders across concurrent deals.
• Excellent written and verbal communication skills.
• Demonstrated ability to operate with confidentiality and professionalism in high-pressure environments.

Preferred Experience

• Experience serving as a cybersecurity Deal Lead for various transactions.
• Experience developing or operating A&D cybersecurity diligence playbooks.
• Experience performing outside-in cyber assessments and technical architecture reviews.
• Experience partnering with various teams and external advisors.
• Experience in regulated healthcare, pharmaceutical, or similarly complex environments.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSP, or equivalent credentials preferred.

Leadership Expectations

• Operates as a technically credible, business-oriented cybersecurity leader.
• Acts with ownership as the cybersecurity Deal Lead for assigned transactions.
• Maintains security by design through practical technical challenge and sound risk judgment.
• Improves repeatability by contributing to standardized diligence methods and templates.
• Builds trust with stakeholders through concise communication and high-quality execution.

Benefits

• Vacation – 120 hours per calendar year.
• Sick time - 40 hours per calendar year; varies by state.
• Holiday pay, including Floating Holidays – 13 days per calendar year.
• Work, Personal and Family Time - up to 40 hours per calendar year.
• Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child.
• Bereavement Leave – 240 hours for an immediate family member.
• Caregiver Leave – 80 hours in a 52-week rolling period.
• Volunteer Leave – 32 hours per calendar year.
• Military Spouse Time-Off – 80 hours per calendar year.

For additional general information on Company benefits, please go to: Company Benefits