Senior Manager, A&D Security Operations

Job description

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world.  We provide an inclusive work environment where each person is considered as an individual.  At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit. Job Function: Technology Enterprise Strategy & Security Job Sub Function: Security & Controls Job Category: People Leader All Job Posting Locations: Alabama (Any City), Alabama (Any City), Alaska (Any City), Arizona (Any City), Arkansas (Any City), California (Any City), Colorado (Any City), Connecticut (Any City), Delaware (Any City), Florida (Any City), Georgia (Any City), Hawaii (Any City), Idaho (Any City), Illinois (Any City), Indiana (Any City), Iowa (Any City), Kansas (Any City), Kentucky (Any City), Louisiana (Any City), Maine (Any City), Maryland (Any City), Massachusetts (Any City), Michigan (Any City), Minnesota (Any City), Mississippi (Any City) {+ 25 more} Job Description: Role Overview The Senior Manager, A&D Security Strategy, Deal Security, and Operations supports the Information Security Risk Management Acquisitions & Divestitures cybersecurity capability across a growing global portfolio of integrations, divestitures, separations, licensing arrangements, minority investments, and strategic partnerships. This role provides operational leadership for A&D cybersecurity portfolio execution, capability resourcing, deal security engagement, executive reporting, playbook maturity, and post-close workstream coordination. The position translates deal priorities, cybersecurity risks, integration requirements, and transition dependencies into structured plans, repeatable processes, and clear reporting that enable timely decisions and consistent execution across concurrent transactions. The Senior Manager partners closely with A&D cybersecurity leadership, JJT A&D, ISRM capability owners, Corporate Development, Legal, Privacy, Finance, IMO/SMO teams, integration leads, business technology teams, and external providers to strengthen deal security coverage, improve portfolio visibility, mature operational processes, and support secure transaction outcomes. Key Responsibilities A&D Cybersecurity Portfolio Operations: Manage a comprehensive portfolio of A&D cybersecurity initiatives across pre-close and post-close phases, including timelines, risks, dependencies, workstream status, resource utilization, and portfolio-level reporting. Capability Resourcing & Oversight: Support resource planning, onboarding, project assignment, contractor coordination, and operating rhythms needed to scale the A&D cybersecurity capability across a growing pipeline of active and future transactions. Deal Security Enablement: Advance deal security initiatives, including service offering awareness, community of practice engagement, deal team education, intake support, and consistent cybersecurity participation across transaction types. Reporting, Governance & Executive Visibility: Maintain executive-level reporting on portfolio performance, risk posture, issue trends, decision needs, and progress against integration and divestiture milestones, with refinements to support diverse deal types. Post-Close Workstream Coordination: Serve as a delivery lead or deputy DRI for selected ISRM post-close integration and divestiture workstreams, helping coordinate plans, owners, dependencies, status, risks, and escalation paths. Process Standardization & Operational Maturity: Establish and improve A&D security administrative processes, playbooks, templates, workflows, RACI models, handoff criteria, portfolio routines, and Definition of Done expectations. Continuous Improvement: Capture lessons learned from prior integrations and divestitures, update cybersecurity integration playbooks, improve reporting and workflows, and partner across JJT A&D and ISRM teams to strengthen execution quality. Risk, Dependency & Issue Management: Track cybersecurity risks, open issues, remediation activities, decision points, and cross-functional dependencies to help ensure timely closure, escalation, or formal acceptance. Cross-Functional Collaboration: Partner with security, technology, legal, privacy, finance, corporate development, transaction execution, and integration/separation teams to align cybersecurity execution with business priorities and transaction timelines. Team Leadership & Development: Provide guidance to team members, contractors, project resources, and capability leads in a matrixed environment, supporting performance, onboarding, knowledge sharing, accountability, and consistent delivery practices. Qualifications Education Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline. Advanced degree (MBA, MS, or equivalent) preferred. Required Experience & Skills 8+ years of progressive experience in cybersecurity, information risk management, technology operations, program management, M&A transaction support, integration/separation, or related disciplines. Experience coordinating complex programs or portfolios involving multiple workstreams, stakeholders, vendors, dependencies, timelines, risks, and executive reporting needs. Demonstrated ability to translate cybersecurity, technology, and business requirements into actionable operating plans, status reporting, governance routines, and measurable outcomes. Strong understanding of cybersecurity risk management, security controls, vulnerability management, identity and access, endpoint security, cloud and infrastructure considerations, incident response, third-party risk, and data protection concepts. Experience supporting acquisitions, divestitures, integrations, separations, licensing arrangements, strategic partnerships, or similarly complex business transformation efforts preferred. Ability to operate effectively in a highly matrixed global environment, influence without direct authority, and maintain accountability across cross-functional teams. Strong executive communication skills, including the ability to summarize technical risk, business impact, open decisions, dependencies, and progress for senior stakeholders. Experience improving operational processes, playbooks, workflow tools, reporting mechanisms, dashboards, or portfolio governance practices. Demonstrated judgment handling sensitive transaction information, confidentiality requirements, time-sensitive issues, and ambiguous operating conditions. Ability to coach, guide, and coordinate internal team members, contractors, and cross-functional contributors while promoting consistent delivery practices. Preferred Experience Experience developing or managing A&D cybersecurity playbooks, operating models, intake workflows, RACI models, risk trackers, reporting templates, or transition governance processes. Experience supporting post-close integrations, divestitures, TSA execution, business separation, or transition planning. Experience partnering with Corporate Development, Legal, Privacy, Finance, JJT A&D, ISRM capability teams, business technology leaders, external advisors, and managed service providers. Experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, or similarly complex global environments. Relevant certifications such as CISSP, CISM, CRISC, CISA, PMP, Agile, or equivalent credentials preferred. Leadership Expectatio