A&D Pre-Close Security Director

Job not on LinkedIn

🔥 1 minute ago

🏈 Alabama, Alaska, +43 more states – Remote

🏈 Alabama – Remote 🐻 Alaska – Remote 🌵 Arizona – Remote 🏄 California – Remote 🦌 Connecticut – Remote 🏛️ District of Columbia – Remote 🐊 Florida – Remote 🌺 Hawaii – Remote 🥔 Idaho – Remote 🌽 Illinois – Remote 🌪️ Kansas – Remote 🐎 Kentucky – Remote ⚜️ Louisiana – Remote 🦞 Maine – Remote 🦬 Montana – Remote 🌾 Nebraska – Remote 🎰 Nevada – Remote 🗻 New Hampshire – Remote 🏖️ New Jersey – Remote 🌶️ New Mexico – Remote 🗽 New York – Remote 🌲 North Carolina – Remote 🌾 North Dakota – Remote 🏈 Ohio – Remote 🌪️ Oklahoma – Remote 🌲 Oregon – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote ❄️ Minnesota – Remote 🎸 Mississippi – Remote 🏰 Missouri – Remote 🔔 Pennsylvania – Remote ⚓ Rhode Island – Remote 🌴 South Carolina – Remote 🗿 South Dakota – Remote 🎸 Tennessee – Remote 🤠 Texas – Remote ⛷️ Utah – Remote 🍁 Vermont – Remote ⚔️ Virginia – Remote ☕ Washington – Remote ⛰️ West Virginia – Remote 🧀 Wisconsin – Remote 🦬 Wyoming – Remote

💵 $150k - $258.8k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Johnson & Johnson

WebsiteLinkedInAll Job Openings

10,000+ employees

🏥 Healthcare

💊 Pharmaceuticals

🧬 Biotechnology

Healthcare • Pharmaceuticals • Biotechnology

<Johnson & Johnson> is a global healthcare company that researches, develops, manufactures and markets pharmaceuticals, medical devices and consumer health products. The company focuses on innovative medicines and therapies across oncology, immunology, neuroscience and cardiopulmonary areas, and develops MedTech solutions in cardiovascular, orthopaedics, surgery and vision. Johnson & Johnson also engages in health & wellness education, large-scale manufacturing, investor activities and global social-impact initiatives.

📋 Description

• Define, govern, and continuously improve the enterprise cybersecurity approach for pre-close mergers, acquisitions, divestitures, licensing arrangements, minority investments, and strategic partnerships • Provide executive leadership and oversight for cybersecurity due diligence, transaction risk management, deal security governance, and integration or separation readiness • Partner with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM owners, business technology leaders, transaction teams, and senior executives • Establish and govern the pre-close cybersecurity strategy, operating model, decision framework, standards, and escalation paths • Lead the enterprise cybersecurity due diligence program, including assessment methods, evidence requirements, regulatory and control criteria, reporting standards, and quality expectations • Evaluate cyber risks, incidents, regulatory exposure, control gaps, architecture choices, technology dependencies, and remediation obligations • Advise transaction sponsors on risk acceptance, contractual protections, closing conditions, security-by-design requirements, Day 1 priorities, and post-close commitments • Translate diligence findings and enterprise requirements into Day 1 objectives, minimum controls, transition assumptions, TSA considerations, dependency tracking, and handoff requirements • Oversee the global pre-close transaction portfolio and prioritize resources based on deal value, threat, complexity, regulatory impact, and timing • Communicate findings, regulatory implications, recommendations, residual risk, decisions, and business impacts to executives, governance boards, steering committees, and transaction sponsors • Standardize intake, questionnaires, risk taxonomies, scoring, evidence, dashboards, metrics, templates, and workflow automation • Lead and develop managers, cybersecurity professionals, deal leads, and cross-functional contributors

🎯 Requirements

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline • 12+ years of progressive experience in cybersecurity, information risk management, technology leadership, M&A transaction support, integration or separation, or related disciplines • Experience leading cybersecurity programs supporting acquisitions, divestitures, licensing, minority investments, strategic partnerships, or other complex business transactions • Comprehensive regulatory and compliance insight • Broad technical expertise across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, security operations, incident response, third-party risk, privacy, and cyber resilience • Ability to troubleshoot complex cybersecurity and technology issues at Director level and make risk-informed decisions • Experience aligning enterprise security requirements with transaction constraints, policies, standards, control objectives, and exception processes • Experience influencing executives and driving cross-functional initiatives across highly matrixed, global environments • Strong understanding of NIST Cybersecurity Framework, ISO 27001, NIST 800-series publications, GDPR, HIPAA, and other applicable requirements • Experience managing portfolios involving concurrent deals, assessments or workstreams, vendors, senior stakeholders, dependencies, and time-sensitive decisions • Exceptional executive communication and presentation skills • Ability to navigate ambiguity, protect transaction confidentiality, drive organizational change, and improve repeatability through data, tools, automation, and governance • Advanced degree (MBA, MS, or equivalent) preferred • Preferred experience with A&D cybersecurity playbooks, questionnaires, control libraries, risk-scoring methods, RACI models, handoff criteria, and phase-based transaction standards • Preferred experience designing automation for intake, evidence collection, risk reporting, workflow orchestration, dashboards, and portfolio governance • Preferred experience partnering with Corporate Development, Legal, Privacy, Finance, Technology Services, business technology teams, IMO/SMO functions, external advisors, and managed service providers • Experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, or similarly complex global environments preferred • Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSK, or equivalent credentials preferred

🏖️ Benefits

• Participation in the Company’s consolidated retirement plan (pension) • Savings plan (401(k)) • Long-term incentive program • Vacation – 120 hours per calendar year • Sick time – 40 hours per calendar year; 48 hours for employees residing in Colorado; 56 hours for employees residing in Washington • Holiday pay, including Floating Holidays – 13 days per calendar year • Work, Personal and Family Time – up to 40 hours per calendar year • Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child • Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year • Caregiver Leave – 80 hours in a 52-week rolling period • Volunteer Leave – 32 hours per calendar year • Military Spouse Time-Off – 80 hours per calendar year