Senior Manager, A&D Security Operations

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit. Job Function: Technology Enterprise Strategy & Security Job Sub Function: Security & Controls Job Category: People Leader All Job Posting Locations: Alabama (Any City), Alabama (Any City), Alaska (Any City), Arizona (Any City), Arkansas (Any City), California (Any City), Colorado (Any City), Connecticut (Any City), Delaware (Any City), Florida (Any City), Georgia (Any City), Hawaii (Any City), Idaho (Any City), Illinois (Any City), Indiana (Any City), Iowa (Any City), Kansas (Any City), Kentucky (Any City), Louisiana (Any City), Maine (Any City), Maryland (Any City), Massachusetts (Any City), Michigan (Any City), Minnesota (Any City), Mississippi (Any City) {+ 25 more} Job Description: Role Overview The Senior Manager, A&D Security Strategy, Deal Security, and Operations supports the Information Security Risk Management Acquisitions & Divestitures cybersecurity capability across a growing global portfolio of integrations, divestitures, separations, licensing arrangements, minority investments, and strategic partnerships. This role provides operational leadership for A&D cybersecurity portfolio execution, capability resourcing, deal security engagement, executive reporting, playbook maturity, and post-close workstream coordination. The position translates deal priorities, cybersecurity risks, integration requirements, and transition dependencies into structured plans, repeatable processes, and clear reporting that enable timely decisions and consistent execution across concurrent transactions. The Senior Manager partners closely with A&D cybersecurity leadership, JJT A&D, ISRM capability owners, Corporate Development, Legal, Privacy, Finance, IMO/SMO teams, integration leads, business technology teams, and external providers to strengthen deal security coverage, improve portfolio visibility, mature operational processes, and support secure transaction outcomes. Key Responsibilities A&D Cybersecurity Portfolio Operations: Manage a comprehensive portfolio of A&D cybersecurity initiatives across pre-close and post-close phases, including timelines, risks, dependencies, workstream status, resource utilization, and portfolio-level reporting. Capability Resourcing & Oversight: Support resource planning, onboarding, project assignment, contractor coordination, and operating rhythms needed to scale the A&D cybersecurity capability across a growing pipeline of active and future transactions. Deal Security Enablement: Advance deal security initiatives, including service offering awareness, community of practice engagement, deal team education, intake support, and consistent cybersecurity participation across transaction types. Reporting, Governance & Executive Visibility: Maintain executive-level reporting on portfolio performance, risk posture, issue trends, decision needs, and progress against integration and divestiture milestones, with refinements to support diverse deal types. Post-Close Workstream Coordination: Serve as a delivery lead or deputy DRI for selected ISRM post-close integration and divestiture workstreams, helping coordinate plans, owners, dependencies, status, risks, and escalation paths. Process Standardization & Operational Maturity: Establish and improve A&D security administrative processes, playbooks, templates, workflows, RACI models, handoff criteria, portfolio routines, and Definition of Done expectations. Continuous Improvement: Capture lessons learned from prior integrations and divestitures, update cybersecurity integration playbooks, improve reporting and workflows, and partner across JJT A&D and ISRM teams to strengthen execution quality. Risk, Dependency & Issue Management: Track cybersecurity risks, open issues, remediation activities, decision points, and cross-functional dependencies to help ensure timely closure, escalation, or formal acceptance. Cross-Functional Collaboration: Partner with security, technology, legal, privacy, finance, corporate development, transaction execution, and integration/separation teams to align cybersecurity execution with business priorities and transaction timelines. Team Leadership & Development: Provide guidance to team members, contractors, project resources, and capability leads in a matrixed environment, supporting performance, onboarding, knowledge sharing, accountability, and consistent delivery practices. Qualifications Education Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline. Advanced degree (MBA, MS, or equivalent) preferred. Required Experience & Skills 8+ years of progressive experience in cybersecurity, information risk management, technology operations, program management, M&A transaction support, integration/separation, or related disciplines. Experience coordinating complex programs or portfolios involving multiple workstreams, stakeholders, vendors, dependencies, timelines, risks, and executive reporting needs. Demonstrated ability to translate cybersecurity, technology, and business requirements into actionable operating plans, status reporting, governance routines, and measurable outcomes. Strong understanding of cybersecurity risk management, security controls, vulnerability management, identity and access, endpoint security, cloud and infrastructure considerations, incident response, third-party risk, and data protection concepts. Experience supporting acquisitions, divestitures, integrations, separations, licensing arrangements, strategic partnerships, or similarly complex business transformation efforts preferred. Ability to operate effectively in a highly matrixed global environment, influence without direct authority, and maintain accountability across cross-functional teams. Strong executive communication skills, including the ability to summarize technical risk, business impact, open decisions, dependencies, and progress for senior stakeholders. Experience improving operational processes, playbooks, workflow tools, reporting mechanisms, dashboards, or portfolio governance practices. Demonstrated judgment handling sensitive transaction information, confidentiality requirements, time-sensitive issues, and ambiguous operating conditions. Ability to coach, guide, and coordinate internal team members, contractors, and cross-functional contributors while promoting consistent delivery practices. Preferred Experience Experience developing or managing A&D cybersecurity playbooks, operating models, intake workflows, RACI models, risk trackers, reporting templates, or transition governance processes. Experience supporting post-close integrations, divestitures, TSA execution, business separation, or transition planning. Experience partnering with Corporate Development, Legal, Privacy, Finance, JJT A&D, ISRM capability teams, business technology leaders, external advisors, and managed service providers. Experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, or similarly complex global environments. Relevant certifications such as CISSP, CISM, CRISC, CISA, PMP, Agile, or equivalent credentials preferred. Leadership Expectations Operates with strong ownership, urgency, and discretion across sensitive acquisitions, divestitures, and strategic transaction activity. Builds structure in ambiguous environments by translating complex deal requirements into clear plans, ownership, milestones, and reporting. Balances transaction speed with cybersecurity risk management, enterprise policy expectations, resource constraints, and business continuity needs. Drives operational maturity through repeatable processes, practical playbooks, data-driven reporting, lessons learned, and continuous improvement. Creates a collaborative, accountable team environment that supports knowledge sharing, contractor integration, capability growth, and high-quality execution. Required Skills: Preferred Skills: Business Process Design, Collaboration, Crisis Management, Critical Thinking, Cyber Threat Intelligence, Developing Others, Inclusive Leadership, Information Security Auditing, Information Security Management System (ISMS), Information Technology (IT) Security Assessments, Information Technology Strategies, Leadership, Managing Managers, People Performance Management, Presentation Design, Process Optimization, Security Architecture Design, Security Policies Remote work options may be considered on a case-by-case basis and if approved by the Company. Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act. Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, please contact us via or contact AskGS to be directed to your accommodation resource. The anticipated base pay range for this position is : $122,000.00 - $212,750.00 Additional Description for Pay Transparency: Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)). Subject to the terms of their respective policies and date of hire, employees are eligible for the following time off benefits: Vacation –120 hours per calendar year Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year Holiday pay, including Floating Holidays –13 days per calendar year Work, Personal and Family Time - up to 40 hours per calendar year Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year Caregiver Leave – 80 hours in a 52-week rolling period10 days Volunteer Leave – 32 hours per calendar year Military Spouse Time-Off – 80 hours per calendar year For additional general information on Company benefits, please go to: - #J-18808-Ljbffr