Sr. Product Security R&D Manager

Johnson & Johnson seeks a senior leader to oversee product security, privacy, and operating system strategy for connected medical devices, robotics, and digital surgery platforms. The role involves defining security standards across development and regulatory submissions, leading a global team, and serving as the organization's primary security voice with regulators and customers.

Responsibilities

• Define and own multi-year product security, privacy, and OS strategy across connected device portfolio aligned with business and regulatory requirements
• Lead global team of engineers and external partners; build talent development plans, hiring strategy, and succession planning
• Own vulnerability management program and make risk decisions including remediation priorities and coordinated disclosure
• Serve as accountable owner for cybersecurity and privacy content in regulatory submissions and ensure compliance standards
• Represent organization's product security interests with regulators, auditors, and customers on security assessments and contractual matters

Requirements

• Bachelor's degree in Computer Science, Software Engineering, Electrical Engineering, or related technical field
• Minimum 8 years technical experience or advanced degree with 5 years technical experience, including 5+ years leading technical teams
• Proven leadership of product security programs for regulated medical devices or connected products with regulatory submission accountability
• Working knowledge of FDA cybersecurity guidance, IEC 62304, ISO 14971, and NIST frameworks
• Technical expertise in threat modeling, vulnerability management, security testing, OS hardening, and patch management
• Demonstrated ability to make risk-based decisions and communicate to executives, regulators, and customers
• Experience managing budgets, vendors, and influencing cross-functional stakeholders