Director, AI Security

At Johnson & Johnsonwe believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented treated and curedwhere treatments are smarter and less invasive andsolutions are our expertise in Innovative Medicine and MedTech we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow and profoundly impact health for more at

As guided by Our Credo Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Technology Enterprise Strategy & Security

Job Sub Function:

Security & Controls

Job Category:

People Leader

All Job Posting Locations:

New Brunswick New Jersey United States of America Raritan New Jersey United States of America

Job Description:

Job Description:

The Director AI Security is a cybersecurity leader accountable for establishing and scaling enterprise AI security capabilities that reduce cybersecurity risk across Johnson & Johnson. Capabilities span LLM model and harness security (including lifecycle management) agent security (including non-human identity) end-user AI usage management AI supply chain security AI runtime protection AI security assurance through the lifecycle ongoing AI security observability and monitoring and AI application security.

The role is accountable for the security of enterprise AI platforms commercial SaaS AI services embedded AI capabilities in third-party products open source models and components internally developed AI solutions and agent ecosystems enabling the business to adopt AI securely while protecting sensitive information and critical operations within a regulated healthcare environment (including GxP/validated systems HIPAA and the EU AI Act).

The Director AI Security will lead a team accountable for addressing AI-related risks such as prompt injection sensitive data exposure excessive agent privileges tool misuse model and data poisoning and compromised AI supply chains. This leader will validate AI control effectiveness through adversarial testing work closely with the IAM team on agentic identity and partner with Vulnerability Management and Application Security teams to drive timely remediation.

The role also partners with Cyber Defense and GSO on threat detection and response and with AI Governance Privacy Security and Technology Architecture and Risk Management teams to ensure security controls are enabled across AI technologies through enterprise AI standards onboarding processes and operational guardrails. Those teams retain ownership of governance and architecture decisions.

The role will also operationalize frontier AI and other advanced models to identify and prioritize cybersecurity exposures accelerate investigation in partnership with Cyber Defense and GSO and expedite remediation with appropriate safeguards and human validation. Success will be measured through expanded security coverage effective protection of AI systems and models faster risk identification and remediation and demonstrable reduction in enterprise cybersecurity risk.

Key Responsibilities:

• Be accountable for establishing and scaling the enterprise AI security capabilities including LLM model and harness security (and lifecycle management) agent security (including non-human identity) end-user AI usage management AI supply chain security AI runtime protection AI security assurance through the lifecycle ongoing AI security observability and monitoring and AI application security.
• Establish AI discovery capabilities to identify enterprise use of generative AI AI applications agents and models across the full AI footprint and prioritize gaps in security coverage.
• Establish end-user AI usage management including access enforcement and data protection controls for generative AI use to prevent unauthorized access and sensitive information exposure.
• Own AI agent identity and authorization security including non-human identities credentials service accounts and least-privilege permissions working closely with the IAM team with a focus on agentic identity.
• Partner with key stakeholder teams to integrate security testing and protective controls throughout AI system development deployment and ongoing operation.
• Establish AI onboarding and assurance including security evaluation of new AI capabilities before they enter production: security assessment of new models (and their ongoing management) agent security reviews AI red-team guidance supply chain assurance and runtime monitoring requirements.
• Define security approval criteria for production deployment of AI models agents and applications including emerging and frontier model capabilities.
• Implement model and AI supply chain security controls to detect and mitigate model and data poisoning compromised components and exposures affecting deployed models.
• Ensure continuous adversarial testing of models AI applications and agent workflows to identify prompt injection and other high-impact threats validate defenses and verify remediation.
• Integrate AI security telemetry and detections into security operations and partner with Cyber Defense on AI-specific detection triage and incident response playbooks.
• Deploy frontier AI and other advanced models to identify and prioritize cybersecurity exposures accelerate investigations in partnership with Cyber Defense and GSO and expedite remediation with appropriate safeguards and human validation.
• Partner with AI Governance Privacy Security and Technology Architecture and Risk Management teams to ensure security controls are enabled across AI technologies through enterprise AI standards onboarding processes and operational guardrails.
• Own AI security vendor relationships and budget including vendor selection performance management and spend; maintain vendor strategy and capability rationalization.
• Partner with Vulnerability Management Application Security and business teams to drive timely remediation of AI-related exposures.
• Be accountable for enterprise AI security standards adoption measurement of AI security control effectiveness executive risk communication and the AI security roadmap and investment planning in partnership with Security Architecture.

Education:

• Bachelors degree in Information Security Computer Science Engineering Information Systems or a related discipline or equivalent experience.
• Advanced degree (MBA MS or equivalent) preferred.

Required Experience and Skills:

• 12 years of progressive experience in cybersecurity application security security engineering or related disciplines including leadership of enterprise security capabilities plus recent hands-on experience securing AI-enabled systems. The 12 years refers to overall cybersecurity experience not AI-specific experience.
• Demonstrated experience implementing operating and scaling AI security capabilities across end-user generative AI services AI applications agents and models with measurable improvements in security coverage and risk reduction.
• Working understanding of AI and machine learning lifecycles large language models retrieval-augmented generation (RAG) model APIs and agent tool integrations including their security implications across development deployment and inference.
• Practical expertise in AI discovery identity and access enforcement least-privilege agent permissions secrets protection data loss prevention and runtime safeguards with demonstrated ability to assess and mitigate prompt injection sensitive data exposure excessive agency tool misuse insecure output handling model theft adversarial manipulation data and model poisoning and AI supply chain compromise.
• Experience in cloud and platform security including securing the cloud data and identity platforms on which AI workloads and services run.
• Experience integrating AI security telemetry with security operations and incident response processes in partnership with Cyber Defense including detection engineering investigation containment and remediation of threats affecting AI systems and models.
• Proven ability to lead technical security teams manage vendors budgets and concurrent capability deployments and partner with engineering security operations and business stakeholders across a global highly matrixed enterprise.
• Strong executive stakeholder management technical judgment and communication skills with the ability to translate emerging AI threats into prioritized defenses and communicate business impact control effectiveness security coverage and remediation outcomes.

Preferred Experience:

• Experience securing production multi-agent systems and Model Context Protocol (MCP) integrations including delegated authorization isolated tool execution inter-agent trust boundaries and defenses against memory poisoning and cascading compromise.
• Deep technical experience evaluating open-weight and fine-tuned models for backdoors poisoning model extraction and training-data leakage and building automated adversarial evaluation suites informed by NIST adversarial machine learning guidance MITRE ATLAS and OWASP AI security guidance.
• Experience embedding AI security testing and controls into software delivery and MLOps pipelines including model and dependency assessment adversarial testing AI red teaming remediation validation and repeatable evaluation of models applications and agent workflows.
• Advanced machine learning engineering or frontier model research experience including model development fine-tuning and evaluation and adversarial AI research or specialized red-team experience.
• Working knowledge of the NIST AI Risk Management Framework and Generative AI Profile OWASP guidance for LLM and agentic application security and MITRE ATLAS with the ability to translate relevant threats and recommended practices into operational controls and security tests.
• Practical experience applying frontier AI or other advanced models to cybersecurity use cases including exposure identification risk prioritization investigation and remediation automation with a track record of moving frontier-model-powered vulnerability discovery and remediation from pilot to sustained production use including validation of generated fixes bounded execution approval checkpoints rollback and quantified improvements in remediation speed and quality.
• Experience scaling AI security across cloud-hosted and self-hosted models in regulated healthcare pharmaceutical or MedTech environments including protection of research clinical or manufacturing data and validation of controls without disrupting critical workflows.
• Demonstrated contributions to the AI security field through responsibly disclosed vulnerabilities published applied research open-source security or evaluation tools or substantive contributions to OWASP MITRE ATLAS or comparable industry initiatives with evidence of translating findings into deployed defenses.
• Experience with skill security and multi-turn agentic (loop prompt) security.
• Relevant certifications such as CISSP CISM or equivalent credentials preferred; AI security certifications such as GIAC AI Platform Security (GAIPS) GIAC AI Security Automation Engineer (GASAE) or ISACA Advanced in AI Security Management (AAISM) are particularly desirable.

Leadership Experience:

• Operates as an enterprise-minded cybersecurity leader who balances delivery speed regulatory and enterprise obligations technical risk stakeholder expectations operational continuity and value realization.
• Maintains security by design through clear technical direction informed challenge disciplined governance and partnership with enterprise policy and capability owners.
• Partners with AI Governance Privacy Technology Architecture and Risk Management teams which own governance and architecture decisions to keep role boundaries clear and embed security into enterprise AI standards and processes.
• Builds repeatable systems rather than one-time solutions emphasizing scalability measurable outcomes traceability and continuous improvement.
• Drives accountability by defining ownership escalation paths decision rights quality standards and delivery expectations.
• Creates an inclusive collaborative environment that encourages mentoring knowledge sharing pragmatic risk management and high-quality execution.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity age national origin disability protected
veteran status or other characteristics protected by federal state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants needs. If you are an individual with a disability and would like to request an accommodation external applicants please contact us via internal employees contact AskGS to be directed to your accommodation resource.

#LI-remote

#LI-GR1

Required Skills:

Preferred Skills:

AI solution evaluation Business Process Design Creating Purpose Crisis Management Critical Thinking Cybersecurity Developing Others Inclusive Leadership Information Security Auditing Information Security Management System (ISMS) Information Technology (IT) Security Assessments Information Technology Strategies Leadership Organizing People Performance Management Presentation Design Process Optimization Security Architecture Design Security Policies

The anticipated base pay range for this position is :

$154000.00 - $265650.00

Additional Description for Pay Transparency:

Subject to the terms of their respective plans employees are eligible to participate in the Companys consolidated retirement plan (pension) and savings plan (401(k)).

This position is eligible to participate in the Companys long-term incentive program.

Subject to the terms of their respective policies and date of hire employees are eligible for the following time off benefits:

Vacation 120 hours per calendar year

Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado 48 hours per calendar year; for employees who reside in the State of Washington 56 hours per calendar year

Holiday pay including Floating Holidays 13 days per calendar year

Work Personal and Family Time - up to 40 hours per calendar year

Parental Leave 480 hours within one year of the birth/adoption/foster care of a child

Bereavement Leave 240 hours for an immediate family member: 40 hours for an extended family member per calendar year

Caregiver Leave 80 hours in a 52-week rolling period10 days

Volunteer Leave 32 hours per calendar year

Military Spouse Time-Off 80 hours per calendar year

For additional general information on Company benefits please go to: Experience:

Director