Product Security Manager

Product Security Manager We are seeking the best talent for a Product Security Manager to join our MedTech Product Security team. The role is based in Milpitas or Irvine, CA with optional remote work and up to 10% travel. Responsibilities Implement J&J’s enterprise Product Security strategy and framework throughout Johnson & Johnson Vision medical device portfolio. Support JJV throughout a new product’s development phases and collaborate with internal organizations on policy enhancements. Review product security requirements and recommend security design solutions for new products. Complete quality documentation, threat modelling, penetration testing, software architecture review, code analysis, and other security testing activities. Perform post‑market responsibilities including monitoring for vulnerabilities, assisting with patching and remediation, and responding to customer security questionnaires and contractual language. Drive adherence to J&J Product Security’s overarching framework, champion strategy, partner with internal teams, present metrics, and enforce governance model. Perform automated code scanning and coordinate formal security testing. Respond to customer cybersecurity questionnaires and contractual language for all post‑market medical devices. Other MedTech cybersecurity related duties as needed. Qualifications 8 years IT or cybersecurity experience. Bachelor’s degree or equivalent. Minimum 8 years progressive leadership experience in IT or cybersecurity. Threat modeling experience. Data privacy experience, including GDPR and CCPA. Understanding of HIPAA/HITRUST & ISO 27001. Understanding of penetration testing, vulnerability scanning, CVSS and other security testing principles. Ability to work autonomously and proactively seek security opportunities. Knowledge of hardening techniques for QNX, Windows Embedded, and other operating systems. Ability to create and deliver cybersecurity awareness campaigns. Ability to translate technical security requirements into solutions. Secure coding recommendations. Project leadership with track‑to‑plan capabilities. Write technical security requirements for embedded systems and web platforms. Creative problem‑solving skills. Customer focus (internal & external). Excellent communication, collaboration, networking, influencing at all levels and globally. Strong leadership skills. Preferred Experience leading or participating in formal security audits (HITRUST, SOC2, FedRAMP). Familiarity with FDA and other global regulatory cybersecurity guidance. Experience with web applications and server hardening (AWS, Azure), OWASP Top 10, blue teaming techniques. Experience in cybersecurity pre‑sales. Software development experience. Certifications such as CISSP. MS or advanced degree. Pay Range $118,000.00 - $203,550.00 for Milpitas, CA. Other locations: $102,000 - $177,100. Benefits Retirement plan (pension, 401k), time off: vacation 120 h per year, sick time 40 h per year (48 h for Colorado, 56 h for Washington), holiday pay 13 days per year, work, personal & family time 40 h per year, parental leave 480 h within one year of birth/adoption/foster care, bereavement leave 240 h for an immediate family member, 40 h for an extended family member per year, caregiver leave 80 h, volunteer leave 32 h, military spouse time‑off 80 h. EEO Statement Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section503 of the Rehabilitation Act. Accommodations Johnson & Johnson is committed to providing an inclusive interview process. If you have a disability and need an accommodation, please contact us at #J-18808-Ljbffr NCBiotech