A&D Pre-Close Security Director

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and Med Tech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.

Learn more at  As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Technology Enterprise Strategy & Security

Security & Controls

People Leader

All Job Posting Locations:
Alabama (Any City), Alabama (Any City), Alaska (Any City), Arizona (Any City), Arkansas (Any City), California (Any City), Connecticut (Any City), Delaware (Any City), Florida (Any City), Georgia (Any City), Hawaii (Any City), Idaho (Any City), Illinois (Any City), Indiana (Any City), Kansas (Any City), Kentucky (Any City), Louisiana (Any City), Maine (Any City), Maryland (Any City), Massachusetts (Any City), Michigan (Any City), Minnesota (Any City), Mississippi (Any City), Missouri (Any City), Montana (Any City) {+ 24 more}

The Director, Information Security Risk Management (ISRM) Acquisitions & Divestitures (A&D) Cybersecurity, Pre-Close, serves as the strategic leader responsible for defining, governing, and continuously improving the enterprise cybersecurity approach for pre-close mergers, acquisitions, divestitures, licensing arrangements, minority investments, and strategic partnerships. This role provides executive leadership and oversight for cybersecurity due diligence, transaction risk management, deal security governance, and integration or separation readiness.

The Director applies comprehensive regulatory and compliance insight together with broad technical expertise across cybersecurity and enterprise technology to challenge assumptions, troubleshoot complex deal issues, make risk-informed decisions, and preserve security-by-design principles throughout transaction planning. The Director partners closely with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM capability and policy owners, business technology leaders, transaction teams, and senior executives to ensure cyber risks and enterprise policy requirements are incorporated into deal decisions, contractual protections, Day 1 priorities, integration and separation plans, and post-close commitments.

• Strategic Leadership, Policy Alignment & Governance:
  Establish and govern the pre-close cybersecurity strategy, operating model, decision framework, standards, and escalation paths. Partner with key ISRM policy, capability, architecture, risk, and control stakeholders to ensure enterprise requirements are reflected in integration and separation plans and addressed through approved exception processes where necessary.
• Cybersecurity Due Diligence Leadership:
  Lead the enterprise cybersecurity due diligence program by defining assessment methods, evidence requirements, regulatory and control criteria, reporting standards, and quality expectations. Provide executive oversight of internal and third-party assessments.
• Transaction Risk & Technical Decision Support:
  Evaluate material cyber risks, incidents, regulatory exposure, control gaps, architecture choices, technology dependencies, and remediation obligations. Troubleshoot complex issues and advise transaction sponsors on risk acceptance, contractual protections, closing conditions, security-by-design requirements, Day 1 priorities, and post-close commitments.
• Integration & Separation Readiness:
  Translate diligence findings, enterprise policy requirements, and deal structure into risk-based Day 1 objectives, minimum controls, transition assumptions, TSA considerations, dependency tracking, and clear handoff requirements for post-close execution.
• Portfolio Leadership & Resource Prioritization:
  Oversee the global pre-close transaction portfolio and prioritize resources based on deal value, threat, complexity, regulatory impact, and timing.
• Executive Engagement & Communication:
  Communicate findings,…