Senior Manager, Pre-Close Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior cybersecurity deal lead guiding pre-close diligence for Johnson & Johnson healthcare transactions. Assessing cyber risks, advising deal decisions, and preparing Day 1 security handoffs.
Responsibilities:
- Serve as primary ISRM A&D cybersecurity lead for assigned transactions
- Coordinate cybersecurity due diligence activities, assessment timelines, evidence needs, and documentation
- Evaluate target environments across security architecture, identity, network, endpoint, cloud, application security, data protection, vulnerability management, incident response, third-party risk, and cyber resilience
- Lead questionnaire review, management meeting preparation, outside-in assessment coordination, documentation analysis, follow-up inquiries, advisor engagement, and evidence consolidation
- Translate technical findings into recommendations for risk acceptance, contractual protections, closing conditions, Day 1 priorities, remediation costs, integration dependencies, and post-close commitments
- Partner with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM owners, business technology teams, external advisors, and deal sponsors
- Escalate material risk issues through the Director and appropriate governance channels
- Translate diligence findings into Day 1 objectives, minimum security expectations, TSA considerations, risk register entries, dependency tracking, and handoff materials
- Improve diligence playbooks, questionnaires, risk taxonomies, scoring methods, templates, dashboards, reporting routines, intake workflows, and evidence standards
- Guide managers, analysts, advisors, and cross-functional contributors; promote accountability, mentoring, lessons learned, and consistent A&D cybersecurity methods
Requirements:
- Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline
- 8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related disciplines
- Experience leading or materially supporting cybersecurity due diligence, acquisition assessments, divestiture assessments, third-party security reviews, or complex risk assessments in time-sensitive business environments
- Strong technical background across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, incident response, logging and monitoring, third-party risk, and cyber resilience
- Ability to analyze fragmented or incomplete diligence evidence, identify risk themes, ask effective follow-up questions, troubleshoot technical ambiguity, and distinguish material transaction risk from routine operational findings
- Experience translating technical cybersecurity findings into business-focused recommendations, risk narratives, remediation priorities, Day 1 considerations, contractual inputs, and post-close handoff requirements
- Working knowledge of privacy, legal, regulatory, and enterprise security obligations relevant to regulated global environments
- Strong understanding of NIST Cybersecurity Framework, ISO 27001, NIST 800-series publications, GDPR, HIPAA, and other applicable requirements
- Experience coordinating multiple workstreams, stakeholders, vendors, advisors, and deadlines across concurrent deals or complex programs
- Excellent written and verbal communication skills for technical and non-technical audiences
- Ability to operate with confidentiality, urgency, sound judgment, and professionalism in ambiguous, high-pressure transaction environments
- Advanced degree (MBA, MS, or equivalent) preferred
- Preferred certifications include CISSP, CISM, CRISC, CISA, CCSP, CCSK, or equivalent credentials
Benefits:
- Consolidated retirement plan (pension)
- Savings plan (401(k))
- Vacation – 120 hours per calendar year
- Sick time – 40 hours per calendar year; Colorado residents – 48 hours; Washington residents – 56 hours
- Holiday pay, including Floating Holidays – 13 days per calendar year
- Work, Personal and Family Time – up to 40 hours per calendar year
- Parental Leave – 480 hours within one year of birth/adoption/foster care of a child
- Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year
- Caregiver Leave – 80 hours in a 52-week rolling period
- Volunteer Leave – 32 hours per calendar year
- Military Spouse Time-Off – 80 hours per calendar year
- Remote work options may be considered on a case-by-case basis if approved by the Company
- Equal opportunity and inclusive interview process accommodations
- General company benefits information available at https://www.careers.jnj.com/employee-benefits
Similar Jobs
Security Engineer II
Security Engineer securing information systems, data, and networks for a global organization. Conducting risk assessments, audits, incident investigations, and cybersecurity tool administration.
Senior Profesional Seguridad Física
Senior Physical Security Professional leading risk, security strategy, contracts, and public-force partnerships. PAR Servicios Integrales manages supplier services for the energy sector.
Senior Security Engineer
Senior Security Engineer building security foundations for Lumos’s autonomous identity platform. Designing authorization, threat modeling, cloud security, and vulnerability response for enterprise customers.
Senior Manager, Pre-Close Security
Senior cybersecurity deal lead assessing risks across Johnson & Johnson acquisitions, divestitures, and strategic transactions. Translating technical diligence into closing, Day 1, and post-close security decisions.
Senior Security Engineer
Senior Security Engineer building Python-based automation, integrations, and AI/LLM workflows. Improving SOC operations for a software development client.
IT Cybersecurity Compliance Technical Associate – Campus 2027
Cybersecurity compliance associate supporting GRC workflows, risk assessments, control reviews, and audits at Guidehouse. Assisting U.S. business-hour escalations and compliance documentation.
Senior IT Security Engineer – Security Architecture, Operations
Senior IT Security Engineer developing security architecture and operations for Hypoport’s network of technology companies. Leading monitoring, incident response, tooling and automation.
Adjunct – IT/Cybersecurity
Adjunct instructor teaching IT and cybersecurity courses at Lackawanna College, a private Pennsylvania institution. Preparing course materials, supporting students, and reporting grades.
Cybersecurity Ops Analyst
Cybersecurity Ops Analyst monitoring and investigating threats for SAIC, a defense and mission technology integrator. Operating SIEM and EDR tools across a 24/7/365 security operations center.
Cybersecurity Operations Supervisor, 3rd Shift
Cybersecurity Operations Supervisor leading SAIC’s 24/7 enterprise security response team. Managing investigations, analysts, staffing, and continuous SOC improvements on third shift.
Security Architect
Security Architect designing and assuring secure systems for NEC Software Solutions. Supporting critical public-sector services through threat modelling, governance, and security architecture.
Senior Counsel – Data Governance, Privacy, Cybersecurity
Senior Counsel guiding Cencora’s healthcare services organization on data privacy, cybersecurity, AI, and governance. Advising on regulated health data, contracts, incident response, and technology-enabled offerings.
Adjunct Faculty, Cybersecurity for Leaders and Managers
Cybersecurity adjunct faculty teaching CSIA 300 asynchronously for University of Maryland Global Campus. Mentoring adult learners and supporting their academic and professional growth.
Adjunct Faculty – Microsoft 365 Endpoint Administration, Cybersecurity
Adjunct faculty teaching Microsoft 365 Endpoint Administration at UMGC, an online university serving nontraditional learners. Mentoring students through asynchronous, hands-on cybersecurity coursework.
Security Advisor II, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger security postures. Assessing Falcon environments, recommending remediation, and resolving customer issues.
Senior Director – Security Posture & Exposure Management
Senior security leader overseeing Lilly’s enterprise vulnerability management and exposure reduction. Leading teams, tooling, prioritization, remediation, and executive risk reporting for a global medicines company.
Infrastructure Security Vulnerability Engineer
Infrastructure Security Vulnerability Engineer reducing vulnerability risk across Avaya’s FedRAMP cloud environments. Coordinating remediation, compliance, reporting, and security improvements for federal-government operations.
Cybersecurity Specialist
Cybersecurity Specialist monitoring alerts and investigating incidents for CyberMaxx’s managed detection and response cybersecurity services. Supporting threat detection, customer response, and SOC operations.
Senior Information Security Engineer
Information Security Engineer monitoring threats and vulnerabilities for First American's title insurance, settlement, and property technology solutions. Operating security tools, incident response, risk analysis, and recovery processes.
Senior Information Security Engineer
Senior Cloud Security Engineer operating CNAPP platforms and securing cloud environments at First American India. Driving cloud risk remediation across infrastructure, applications, Kubernetes, and DevSecOps teams.