A&D Post-Close Security Director

🔥 46 minutes ago

🏈 Alabama, Alaska, +44 more states – Remote

🏈 Alabama – Remote 🐻 Alaska – Remote 🌵 Arizona – Remote 🏄 California – Remote ⛰️ Colorado – Remote 🦌 Connecticut – Remote 🐊 Florida – Remote 🌺 Hawaii – Remote 🥔 Idaho – Remote 🌽 Illinois – Remote 🌾 Iowa – Remote 🌪️ Kansas – Remote 🐎 Kentucky – Remote ⚜️ Louisiana – Remote 🦞 Maine – Remote 🦬 Montana – Remote 🌾 Nebraska – Remote 🎰 Nevada – Remote 🗻 New Hampshire – Remote 🏖️ New Jersey – Remote 🌶️ New Mexico – Remote 🗽 New York – Remote 🌲 North Carolina – Remote 🌾 North Dakota – Remote 🏈 Ohio – Remote 🌪️ Oklahoma – Remote 🌲 Oregon – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote ❄️ Minnesota – Remote 🎸 Mississippi – Remote 🏰 Missouri – Remote 🔔 Pennsylvania – Remote ⚓ Rhode Island – Remote 🌴 South Carolina – Remote 🗿 South Dakota – Remote 🎸 Tennessee – Remote 🤠 Texas – Remote ⛷️ Utah – Remote 🍁 Vermont – Remote ⚔️ Virginia – Remote ☕ Washington – Remote ⛰️ West Virginia – Remote 🧀 Wisconsin – Remote 🦬 Wyoming – Remote

💵 $150k - $258.8k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Johnson & Johnson

WebsiteLinkedInAll Job Openings

10,000+ employees

🏥 Healthcare

💊 Pharmaceuticals

🧬 Biotechnology

Healthcare • Pharmaceuticals • Biotechnology

<Johnson & Johnson> is a global healthcare company that researches, develops, manufactures and markets pharmaceuticals, medical devices and consumer health products. The company focuses on innovative medicines and therapies across oncology, immunology, neuroscience and cardiopulmonary areas, and develops MedTech solutions in cardiovascular, orthopaedics, surgery and vision. Johnson & Johnson also engages in health & wellness education, large-scale manufacturing, investor activities and global social-impact initiatives.

📋 Description

• Define, govern, and continuously improve the enterprise cybersecurity approach for post-close acquisitions, divestitures, licensing arrangements, separations, integrations, minority investments, and strategic partnerships • Provide executive leadership and oversight for post-close mobilization, Day 1 stabilization, transition governance, risk remediation, integration and separation execution, TSA delivery and exit, and ongoing portfolio performance • Define post-close cybersecurity strategy, governance, standards, operating rhythms, decision rights, and escalation paths • Convert deal scope, due diligence findings, Day 1 requirements, regulatory obligations, TSA assumptions, milestones, risks, and dependencies into prioritized execution plans • Provide executive and technical oversight for identity, endpoints, infrastructure, cloud, applications, data protection, monitoring, incident response, third parties, regulatory obligations, and TSA delivery and exit • Troubleshoot complex cybersecurity and technology issues, challenge proposed architectures and exceptions, and make risk-informed decisions • Ensure findings are prioritized, assigned, evidenced, escalated, and closed or formally accepted, with control validation and reporting • Oversee concurrent deals, workstreams, vendors, transition services, budgets, milestones, and dependencies • Drive automation for intake, tracking, evidence, controls, notifications, dashboards, metrics, and reporting • Communicate progress, regulatory implications, risks, decisions, dependencies, business impacts, and resource needs to executives and governance forums • Maintain playbooks, runbooks, templates, RACI models, capability standards, lessons learned, handoff criteria, and Definition of Done requirements • Lead and develop managers, cybersecurity professionals, deal leads, project managers, and cross-functional contributors

🎯 Requirements

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline • 12+ years of progressive experience in cybersecurity, information risk management, technology leadership, M&A transaction support, integration or separation, or related disciplines • Demonstrated experience leading cybersecurity programs supporting acquisitions, divestitures, licensing, minority investments, strategic partnerships, or other complex business transactions • Comprehensive regulatory and compliance insight • Broad technical expertise across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, security operations, incident response, third-party risk, privacy, and cyber resilience • Experience troubleshooting complex cybersecurity and technology issues at a Director level • Experience partnering with ISRM policy, capability, architecture, risk, and control owners • Experience influencing executives and driving cross-functional initiatives across highly matrixed, global environments • Strong understanding of NIST Cybersecurity Framework, ISO 27001, NIST 800-series publications, GDPR, HIPAA, and other applicable requirements • Experience managing portfolios involving concurrent deals, assessments or workstreams, vendors, senior stakeholders, dependencies, and time-sensitive decisions • Exceptional executive communication and presentation skills • Ability to navigate ambiguity, protect transaction confidentiality, drive organizational change, and improve repeatability through data, tools, automation, and disciplined governance • Preferred: experience developing or operating A&D cybersecurity playbooks, questionnaires, control libraries, risk-scoring methods, RACI models, handoff criteria, and phase-based transaction standards • Preferred: experience designing automation for intake, evidence collection, risk reporting, workflow orchestration, dashboards, and portfolio governance • Preferred: experience partnering with Corporate Development, Legal, Privacy, Finance, Technology Services, business technology teams, IMO/SMO functions, external advisors, and managed service providers • Preferred: experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, or similarly complex global environments • Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSK, or equivalent credentials preferred

🏖️ Benefits

• Consolidated retirement plan (pension) • Savings plan (401(k)) • Long-term incentive program • Vacation –120 hours per calendar year • Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year • Holiday pay, including Floating Holidays –13 days per calendar year • Work, Personal and Family Time - up to 40 hours per calendar year • Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child • Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year • Caregiver Leave – 80 hours in a 52-week rolling period10 days • Volunteer Leave – 32 hours per calendar year • Military Spouse Time-Off – 80 hours per calendar year