Senior Manager, A&D Security Operations

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Technology Enterprise Strategy & Security

The Senior Manager, A&D Security Strategy, Deal Security, and Operations supports the Information Security Risk Management Acquisitions & Divestitures cybersecurity capability across a growing global portfolio of integrations, divestitures, separations, licensing arrangements, minority investments, and strategic partnerships.

This role provides operational leadership for A&D cybersecurity portfolio execution, capability resourcing, deal security engagement, executive reporting, playbook maturity, and post-close workstream coordination. The position translates deal priorities, cybersecurity risks, integration requirements, and transition dependencies into structured plans, repeatable processes, and clear reporting that enable timely decisions and consistent execution across concurrent transactions.

The Senior Manager partners closely with A&D cybersecurity leadership, JJT A&D, ISRM capability owners, Corporate Development, Legal, Privacy, Finance, IMO/SMO teams, integration leads, business technology teams, and external providers to strengthen deal security coverage, improve portfolio visibility, mature operational processes, and support secure transaction outcomes.

A&D Cybersecurity Portfolio Operations:

Manage a comprehensive portfolio of A&D cybersecurity initiatives across pre-close and post-close phases, including timelines, risks, dependencies, workstream status, resource utilization, and portfolio-level reporting.

Support resource planning, onboarding, project assignment, contractor coordination, and operating rhythms needed to scale the A&D cybersecurity capability across a growing pipeline of active and future transactions.

Advance deal security initiatives, including service offering awareness, community of practice engagement, deal team education, intake support, and consistent cybersecurity participation across transaction types.

Maintain executive-level reporting on portfolio performance, risk posture, issue trends, decision needs, and progress against integration and divestiture milestones, with refinements to support diverse deal types.

Serve as a delivery lead or deputy DRI for selected ISRM post-close integration and divestiture workstreams, helping coordinate plans, owners, dependencies, status, risks, and escalation paths.

Establish and improve A&D security administrative processes, playbooks, templates, workflows, RACI models, handoff criteria, portfolio routines, and Definition of Done expectations.

Continuous Improvement:

Capture lessons learned from prior integrations and divestitures, update cybersecurity integration playbooks, improve reporting and workflows, and partner across JJT A&D and ISRM teams to strengthen execution quality.

Risk, Dependency & Issue Management:

Track cybersecurity risks, open issues, remediation activities, decision points, and cross-functional dependencies to help ensure timely closure, escalation, or formal acceptance.

Partner with security, technology, legal, privacy, finance, corporate development, transaction execution, and integration/separation teams to align cybersecurity execution with business priorities and transaction timelines.

Provide guidance to team members, contractors, project resources, and capability leads in a matrixed environment, supporting performance, onboarding, knowledge sharing, accountability, and consistent delivery practices.

Bachelors degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.

Advanced degree (MBA, MS, or equivalent) preferred.

8+ years of progressive experience in cybersecurity, information risk management, technology operations, program management, M&A transaction support, integration/separation, or related disciplines.

Experience coordinating complex programs or portfolios involving multiple workstreams, stakeholders, vendors, dependencies, timelines, risks, and executive reporting needs.

Demonstrated ability to translate cybersecurity, technology, and business requirements into actionable operating plans, status reporting, governance routines, and measurable outcomes.

Strong understanding of cybersecurity risk management, security controls, vulnerability management, identity and access, endpoint security, cloud and infrastructure considerations, incident response, third-party risk, and data protection concepts.

Experience supporting acquisitions, divestitures, integrations, separations, licensing arrangements, strategic partnerships, or similarly complex business transformation efforts preferred.

Strong executive communication skills, including the ability to summarize technical risk, business impact, open decisions, dependencies, and progress for senior stakeholders.

Ability to coach, guide, and coordinate internal team members, contractors, and cross-functional contributors while promoting consistent delivery practices.

Experience developing or managing A&D cybersecurity playbooks, operating models, intake workflows, RACI models, risk trackers, reporting templates, or transition governance processes.

Experience supporting post-close integrations, divestitures, TSA execution, business separation, or transition planning.

Experience partnering with Corporate Development, Legal, Privacy, Finance, JJT A&D, ISRM capability teams, business technology leaders, external advisors, and managed service providers.

Experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, or similarly complex global environments.

Relevant certifications such as CISSP, CISM, CRISC, CISA, PMP, Agile, or equivalent credentials preferred.

Operates with strong ownership, urgency, and discretion across sensitive acquisitions, divestitures, and strategic transaction activity.

Builds structure in ambiguous environments by translating complex deal requirements into clear plans, ownership, milestones, and reporting.

Balances transaction speed with cybersecurity risk management, enterprise policy expectations, resource constraints, and business continuity needs.

Drives operational maturity through repeatable processes, practical playbooks, data-driven reporting, lessons learned, and continuous improvement.

Creates a collaborative, accountable team environment that supports knowledge sharing, contractor integration, capability growth, and high-quality execution.

Remote work options may be considered on a case-by-case basis and if approved by the Company.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

If you are an individual with a disability and would like to request an accommodation, please contact us via

or contact AskGS to be directed to your accommodation resource.

Business Process Design, Collaboration, Crisis Management, Critical Thinking, Cyber Threat Intelligence, Developing Others, Inclusive Leadership, Information Security Auditing, Information Security Management System (ISMS), Information Technology (IT) Security Assessments, Information Technology Strategies, Leadership, Managing Managers, People Performance Management, Presentation Design, Process Optimization, Security Architecture Design, Security Policies

Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)).

Subject to the terms of their respective policies and date of hire, employees are eligible for the following time off benefits:

Holiday pay, including Floating Holidays –13 days per calendar year

Work, Personal and Family Time - up to 40 hours per calendar year

Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child

Bereavement Leave – 240 hours for an immediate family member: