Senior Manager, Pre-Close Security

Job not on LinkedIn

🔥 3 minutes ago

🏈 Alabama, Alaska, +44 more states – Remote

🏈 Alabama – Remote 🐻 Alaska – Remote 🌵 Arizona – Remote 🏄 California – Remote ⛰️ Colorado – Remote 🦌 Connecticut – Remote 🐊 Florida – Remote 🌺 Hawaii – Remote 🥔 Idaho – Remote 🌽 Illinois – Remote 🌾 Iowa – Remote 🌪️ Kansas – Remote 🐎 Kentucky – Remote ⚜️ Louisiana – Remote 🦞 Maine – Remote 🦬 Montana – Remote 🌾 Nebraska – Remote 🎰 Nevada – Remote 🗻 New Hampshire – Remote 🏖️ New Jersey – Remote 🌶️ New Mexico – Remote 🗽 New York – Remote 🌲 North Carolina – Remote 🌾 North Dakota – Remote 🏈 Ohio – Remote 🌪️ Oklahoma – Remote 🌲 Oregon – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote ❄️ Minnesota – Remote 🎸 Mississippi – Remote 🏰 Missouri – Remote 🔔 Pennsylvania – Remote ⚓ Rhode Island – Remote 🌴 South Carolina – Remote 🗿 South Dakota – Remote 🎸 Tennessee – Remote 🤠 Texas – Remote ⛷️ Utah – Remote 🍁 Vermont – Remote ⚔️ Virginia – Remote ☕ Washington – Remote ⛰️ West Virginia – Remote 🧀 Wisconsin – Remote 🦬 Wyoming – Remote

💵 $122k - $212.8k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Johnson & Johnson

WebsiteLinkedInAll Job Openings

10,000+ employees

🏥 Healthcare

💊 Pharmaceuticals

🧬 Biotechnology

Healthcare • Pharmaceuticals • Biotechnology

<Johnson & Johnson> is a global healthcare company that researches, develops, manufactures and markets pharmaceuticals, medical devices and consumer health products. The company focuses on innovative medicines and therapies across oncology, immunology, neuroscience and cardiopulmonary areas, and develops MedTech solutions in cardiovascular, orthopaedics, surgery and vision. Johnson & Johnson also engages in health & wellness education, large-scale manufacturing, investor activities and global social-impact initiatives.

📋 Description

• Serve as the primary ISRM A&D cybersecurity lead for assigned transactions • Coordinate diligence activities, assessment timelines, evidence needs, and documentation for deal teams and leadership • Evaluate target environments across security architecture, identity, network, endpoint, cloud, application security, data protection, vulnerability management, incident response, third-party risk, and cyber resilience • Lead questionnaire review, management meeting preparation, outside-in assessment coordination, documentation analysis, follow-up inquiries, advisor engagement, and evidence consolidation • Translate technical findings into recommendations for risk acceptance, contractual protections, closing conditions, Day 1 priorities, remediation costs, integration dependencies, and post-close commitments • Partner with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM owners, business technology teams, external advisors, and deal sponsors • Escalate material risk issues through the Director and appropriate governance channels • Translate diligence findings into Day 1 objectives, minimum security expectations, TSA considerations, risk register entries, dependency tracking, and handoff materials • Improve diligence playbooks, questionnaires, risk taxonomies, scoring methods, templates, dashboards, reporting routines, intake workflows, and evidence standards • Guide managers, analysts, advisors, and cross-functional contributors while promoting accountability, mentoring, lessons learned, and consistent A&D cybersecurity methods

🎯 Requirements

• Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline • 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related disciplines • Experience leading or materially supporting cybersecurity due diligence, acquisition assessments, divestiture assessments, third-party security reviews, or complex risk assessments in time-sensitive business environments • Strong technical background across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, incident response, logging and monitoring, third-party risk, and cyber resilience • Ability to analyze fragmented or incomplete diligence evidence, identify risk themes, ask effective follow-up questions, troubleshoot technical ambiguity, and distinguish material transaction risk from routine operational findings • Experience translating technical cybersecurity findings into business-focused recommendations, risk narratives, remediation priorities, Day 1 considerations, contractual inputs, and post-close handoff requirements • Working knowledge of privacy, legal, regulatory, and enterprise security obligations relevant to regulated global environments • Understanding of NIST Cybersecurity Framework, ISO 27001, NIST 800-series publications, GDPR, HIPAA, and other applicable requirements • Experience coordinating multiple workstreams, stakeholders, vendors, advisors, and deadlines across concurrent deals or complex programs • Excellent written and verbal communication skills for technical and non-technical audiences • Ability to operate with confidentiality, urgency, sound judgment, and professionalism in ambiguous, high-pressure transaction environments • Advanced degree (MBA, MS, or equivalent) preferred • Preferred experience as a cybersecurity Deal Lead or workstream lead for acquisitions, divestitures, licensing transactions, minority investments, strategic partnerships, or joint ventures • Preferred experience developing or operating A&D cybersecurity diligence playbooks, questionnaires, control libraries, risk-scoring methods, issue logs, decision records, RACI models, and handoff criteria • Preferred experience performing outside-in cyber assessments, threat exposure reviews, breach history analysis, vendor risk analysis, or technical architecture reviews • Preferred experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, life sciences, or similarly complex global environments • Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSP, CCSK, or equivalent credentials preferred

🏖️ Benefits

• Retirement plan (pension) • Savings plan (401(k)) • Vacation – 120 hours per calendar year • Sick time – 40 hours per calendar year; 48 hours per calendar year for employees residing in Colorado; 56 hours per calendar year for employees residing in Washington • Holiday pay, including Floating Holidays – 13 days per calendar year • Work, Personal and Family Time – up to 40 hours per calendar year • Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child • Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year • Caregiver Leave – 80 hours in a 52-week rolling period • Volunteer Leave – 32 hours per calendar year • Military Spouse Time-Off – 80 hours per calendar year • Remote work options may be considered on a case-by-case basis if approved by the Company