Senior Manager, Pre-Close Security

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Technology Enterprise Strategy & Security

Job Sub Function:

Security & Controls

Job Category:

People Leader

All Job Posting Locations:

Alabama (Any City), Alabama (Any City), Alaska (Any City), Arizona (Any City), Arkansas (Any City), California (Any City), Colorado (Any City), Connecticut (Any City), Delaware (Any City), Florida (Any City), Georgia (Any City), Hawaii (Any City), Idaho (Any City), Illinois (Any City), Indiana (Any City), Iowa (Any City), Kansas (Any City), Kentucky (Any City), Louisiana (Any City), Maine (Any City), Maryland (Any City), Massachusetts (Any City), Michigan (Any City), Minnesota (Any City), Mississippi (Any City) {+ 26 more}

Job Description:

Role Overview

The Senior Manager, Information Security Risk Management (ISRM) Acquisitions & Divestitures (A&D) Cybersecurity, Pre-Close, reports directly to the Director, ISRM A&D Cybersecurity, Pre-Close and serves as a hands-on Deal Lead for cybersecurity due diligence across mergers, acquisitions, divestitures, licensing arrangements, minority investments, and strategic partnerships.

This role is responsible for leading deal-level cybersecurity assessments, translating diligence evidence into clear risk insights, identifying material technical and regulatory concerns, and supporting risk-informed transaction decisions before close. The Senior Manager brings strong technical depth across enterprise cybersecurity and technology domains and is expected to evaluate target-state environments, challenge assumptions, troubleshoot complex issues, and define practical mitigation recommendations.

The Senior Manager partners with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM capability and policy owners, business technology leaders, external advisors, and transaction teams to ensure cybersecurity risks, enterprise requirements, and Day 1 security priorities are understood, documented, escalated, and transitioned to post-close execution teams.

Key Responsibilities

• Deal Lead for Pre-Close Cybersecurity Due Diligence: Serve as the primary ISRM A&D cybersecurity lead for assigned transactions, coordinating diligence activities, managing assessment timelines, tracking evidence needs, and ensuring findings are clearly documented for deal teams and leadership.

• Technical Risk Assessment & Analysis: Evaluate target environments across security architecture, identity, network, endpoint, cloud, application security, data protection, vulnerability management, incident response, third-party risk, and cyber resilience to identify material risks, control gaps, remediation needs, and integration or separation implications.

• Diligence Execution & Evidence Review: Lead cybersecurity questionnaire review, management meeting preparation, outside-in assessment coordination, documentation analysis, follow-up inquiries, advisor engagement, and consolidation of evidence into practical risk conclusions.

• Transaction Risk Decision Support: Translate technical findings into business-relevant recommendations that inform risk acceptance, contractual protections, closing conditions, Day 1 priorities, remediation cost considerations, integration dependencies, and post-close commitments.

• Stakeholder Coordination & Escalation: Partner with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM capability owners, business technology teams, external advisors, and deal sponsors to align expectations, resolve open questions, and escalate material risk issues through the Director and appropriate governance channels.

• Pre-Close Readiness & Handoff: Translate diligence findings into structured Day 1 objectives, minimum security expectations, TSA considerations, risk register entries, dependency tracking, and handoff materials for post-close integration or separation execution.

• Process, Playbook & Reporting Improvement: Contribute to the continuous improvement of diligence playbooks, questionnaires, risk taxonomies, scoring methods, templates, dashboards, reporting routines, intake workflows, and evidence standards to improve consistency and speed across the portfolio.

…