Lead Product Security Architect

Lead Product Security Architect The Lead Product Security Architect will own the cybersecurity architecture, system‑level view, and technical implementation of the OTTAVA surgical robot, with potential to impact millions of patients and expand the capabilities of physicians globally. This role is not focused on enterprise IT or cloud security operations. The individual will be a key technical and strategic leader, bringing a blend of security awareness, technical ability, and regulatory awareness, and balancing depth in cybersecurity with a passion for understanding the needs of clinicians and operating room staff. This role reports to the Sr. Director, Robotics Software. Responsibilities Own the end‑to‑end cybersecurity architecture for the OTTAVA product, a FDA‑regulated device, maintaining a system‑level view of security and ensuring security‑by‑design from firmware and embedded software to external interfaces Be the singular R&D voice on security, clearly communicating and aligning approaches with internal (quality, information security, regulatory) and external (FDA) stakeholders Act as the technical authority for cybersecurity decisions and trade‑offs Design and oversee implementation of technical cybersecurity controls, primarily based in software and network infrastructure Lead R&D cyber reviews and documentation (threat modeling, risk assessment) in partnership with internal collaborators Translate security risks into patient safety, regulatory, and business impact for non‑security stakeholders Take a risk‑based approach when assessing the relationship between cybersecurity needs, patient safety, regulatory expectations, and quality system requirements Required Experience and Skills 10+ years professional experience in software development or systems engineering with a focus on device security 5+ years experience with hands‑on technical leadership in cybersecurity Demonstrated ability to deliver results on time within constraints by creatively adapting processes and using resources Experience with regulatory guidance (preferably FDA) on cybersecurity implementation and documentation, pre‑ and post‑market surveillance, and risk assessment Proficiency in software development for complex safety‑critical products, ideally within medical device or other highly regulated industries (e.g. defense, autonomous vehicles, aerospace) Demonstrated success in partnering and influencing across a matrix environment Proven leadership designing system‑level security architecture for embedded devices Strong communication and interpersonal skills, with the ability to collaborate effectively with diverse teams and partners Ability to travel up to 10%, international and domestic Preferred Experience and Skills Demonstrated hands‑on experience with FDA Class II or III medical devices Experience with IEC 62304 Previous experience with post‑market vulnerability monitoring Experience reaching across the aisle to successfully partner with and problem solve alongside technical, support, and business partners in other parts of the company Experience with FDA audits and cloud certifications (e.g., SOC2) Understanding of robotic technology and general robotic surgery paradigms Experience with a global development team Previous experience successfully supporting or launching medical device products Base Pay Range $157,000.00 – $271,400.00 Benefits Consolidated retirement plan (pension) and savings plan (401(k)) Long‑term incentive program Vacation – 120 hours per calendar year Sick time – 40 hours per calendar year (48 hours for Colorado, 56 hours for Washington) Holiday pay, including floating holidays – 13 days per calendar year Work, personal and family time – up to 40 hours per calendar year Parental leave – 480 hours within one year of birth/adoption/foster care of a child Bereavement leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year Caregiver leave – 80 hours in a 52‑week rolling period (10 days) Volunteer leave – 32 hours per calendar year Military spouse time‑off – 80 hours per calendar year Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. Johnson & Johnson is committed to providing an inclusive interview process. If you are an individual with a disability and would like to request an accommodation, please contact us at #J-18808-Ljbffr Johnson & Johnson