Senior Manager, Global Security Risk Management

Job description

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit. Job Function: Environmental Health, Safety (EH&S) and Facilities Services (FS) Job Sub Function: Physical Security Job Category: Professional All Job Posting Locations: New Brunswick, New Jersey, United States of America Job Description: We are searching for the best talent for a Senior Manager, Global Security Risk Management to be based in New Brunswick, NJ. Purpose: The Senior Manager, Global Security Risk Management advances the organization’s enterprise security risk management capability by identifying, assessing, prioritizing, and mitigating risks that may impact people, assets, operations, information, reputation, and business continuity. This role provides strategic and operational leadership across global security risk programs, governance practices, and cross-functional partnerships to strengthen organizational resilience. The Senior Manager will assess and translate the evolving risk landscape into actionable guidance, enterprise standards, mitigation strategies, performance dashboards, and executive-level reporting that enable informed decision-making and support consistent risk management across a complex global enterprise. You will be responsible for:Lead the design, implementation, and continuous improvement of a global security risk management framework aligned with enterprise risk management principles, business priorities, and industry-recognized practices. Support the prioritization, collaboration, and evaluation of security risk assessments across sites, regions, functions, third parties, travel environments, and business operations to identify vulnerabilities, emerging threats, and mitigation priorities. Develop risk-based global standards, procedures, playbooks, and guidance that strengthen physical security, operational resilience, travel risk management, workplace threat prevention, crisis readiness, business continuity, and the protection of people and assets. Partner with regional security leaders and business stakeholders to develop mitigation plans, track remediation actions, document risk treatment decisions, and ensure actions are measurable and aligned to business needs. Partner with Global Security Intelligence to monitor the global security risk landscape and translate relevant trends into risk briefings, advisories, escalation recommendations, and executive reporting. Build and maintain risk data, dashboards, key risk indicators, risk registers, acceptance documentation, policy compliance reviews, audit readiness materials, and leadership updates to support governance and accountability. Support the Risk Management Director in planning, developing, implementing, and tracking Global Security policies and procedures, ensuring alignment with governance requirements, risk priorities, operational needs, and continuous improvement objectives. Support crisis management, incident response, and business continuity activities by providing risk intelligence, impact analysis, escalation support, and post-incident lessons learned. Advise on security requirements for new facilities, major projects, mergers and acquisitions, divestitures, high-risk travel, events, and other business initiatives requiring risk-based security input. Collaborate with ERM, Legal, Compliance, Human Resources, ERLR, Facilities, EHS, IT, Privacy, Procurement, Communications, regional security teams, and site leaders to ensure integrated risk identification and response. Engage external security partners, vendors, consultants, law enforcement, industry associations, and peer networks to benchmark practices and strengthen global risk management capabilities. Develop training, awareness materials, stakeholder communications, and program direction to improve security risk literacy, promote a proactive risk culture, and guide teams supporting global risk management activities. Qualifications/Requirements:Bachelor’s degree in Security Management, Criminal Justice, International Relations, Risk Management, Business Administration, Emergency Management, Intelligence Studies, or related field. 8–10 years of progressive experience in corporate security, enterprise security risk management, physical security, crisis management, intelligence, law enforcement, military, or related risk discipline. Demonstrated experience conducting security risk assessments, developing mitigation strategies, tracking remediation, and advising senior leaders on risk-based decisions. Strong understanding of enterprise security risk management, physical security operations, investigations support, crisis response, travel risk, workplace violence prevention, and business continuity. Experience operating in a global or matrixed organization with regional stakeholders, cross-functional partners, and external providers. Strong written, verbal, analytical, and presentation skills, including experience developing policies, standards, operating procedures, dashboards, metrics, and executive-level reports. Master’s degree in Security Management, Business Administration, International Affairs, Risk Management, Organizational Leadership, or related discipline preferred. Professional certification such as Certified Protection Professional, Physical Security Professional, Professional Certified Investigator, Certified Risk Manager, Certified Business Continuity Professional, Project Management Professional, or equivalent credential preferred. Experience applying recognized risk management frameworks or standards, including enterprise security risk management, ISO 31000, ISO 22301, or similar governance approaches preferred. Experience managing vendors, security technology providers, consultants, outsourced risk services, or benchmarking against industry peers preferred. Experience supporting regulated, healthcare, pharmaceutical, life sciences, manufacturing, technology, financial services, or other complex global industries preferred. Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act. Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, please email the Employee Health Support Center (ra-employeehealthsup@its.jnj.com) or contact AskGS to be directed to your accommodation resource. Required Skills: Preferred Skills: Agile Decision Making, Budget Management, Compliance Management, Crisis Management, Emergency Planning, Facility Management, Organizing, Premises Management, Risk Management, Security Framework, Security Monitoring, Security Program Development, Standard Operating Procedure (SOP), Technical Credibility, Vendor Management, Workplace Security Awareness The anticipated base pay ran