Senior Manager, Pre-Close Security

Johnson & Johnson seeks a Senior Manager for Information Security Risk Management to lead cybersecurity due diligence across mergers, acquisitions, divestitures, and strategic partnerships. The role combines technical security expertise with transaction leadership, translating complex risk findings into actionable business recommendations for deal teams and executives.

Responsibilities

• Lead cybersecurity due diligence activities for assigned transactions, managing timelines and evidence tracking
• Evaluate target environments across security architecture, identity, cloud, applications, and data protection
• Conduct questionnaire reviews, coordinate assessments, analyze documentation, and consolidate findings into risk conclusions
• Translate technical assessments into business recommendations informing deal risk decisions, contractual protections, and remediation priorities
• Partner with Corporate Development, Legal, Privacy, Finance, and Technology Services to align expectations and escalate material risks

Requirements

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, or related field
• 8+ years progressive experience in cybersecurity, information risk management, or M&A transaction support
• Demonstrated leadership or substantial support of cybersecurity due diligence and acquisition assessments
• Strong technical depth across enterprise security domains including architecture, identity, cloud, and incident response
• Ability to translate technical findings into business-relevant risk recommendations
• Experience coordinating with cross-functional stakeholders in time-sensitive environments
• Advanced degree (MBA, MS, or equivalent) preferred