Sr. Manager, Security Architecture & Innovation - R&D

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, and solutions are personal.

Through our expertise in Innovative Medicine and Med Tech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.

Learn more at

Raritan, New Jersey, United States of America, Spring House, Pennsylvania, United States of America

Johnson & Johnson is recruiting a Sr. Manager, Security Architecture & Innovation – R&D in Spring House, PA or Raritan, NJ. Join Information Security & Risk Management (ISRM) as the lead cybersecurity architect for Innovative Medicine R&D Discovery. This is an opportunity to shape how breakthrough science operates securely across laboratories, operational technology (OT), clinical supply chain and pilot-plant environments. You will turn complex scientific needs into practical, scalable solutions;

modernize laboratory and OT security architecture; and accelerate priorities such as instrument onboarding, secure data exchange, laboratory automation and attributable access. From early discovery through production, you will apply Zero Trust principles while protecting scientific agility, availability, safety, validated state, data integrity and regulatory compliance.

• Compose end-to-end security solution architecture.
• Partner with scientists and technology teams to translate R&D and laboratory workflows into clear requirements, architecture options, proofs of value and production-ready designs.
• Develop reference architectures that scale.
• Generate, maintain and review current-state, interim and target-state architectures, standards, decision records, threat models, control mappings and implementation patterns.
• Modernize R&D laboratory and OT security.
• Design risk-tiered asset onboarding, secure instrument connectivity, controlled data exchange, laboratory automation, and secure remote and third-party access.
• Make Zero Trust practical.
• Apply identity-, asset-, application-, data-, session- and purpose-aware controls, least privilege, continuous verification and micro-segmentation while accommodating legacy and non-agentable equipment.
• Set the modernization roadmap.
• Strengthen security patterns, assess enterprise capabilities and emerging technologies, test interoperability and failure modes, and recommend vendor-neutral solutions based on risk, value, scalability, cost and operability.
• Serve as a trusted design authority.
• Lead reviews, maintain traceability from requirements to controls, govern exceptions and resolve material security, risk and operational gaps before implementation.
• Design for sustainable operations.
• Define ownership, support, monitoring, incident response, lifecycle management, validation, recovery, supplier responsibilities, service levels and production-readiness criteria.
• Unite diverse teams around a shared vision.
• Align R&D, engineering, Quality, operations, product teams, sites and service providers across network, OT, identity, endpoint, data and laboratory initiatives.
• Demonstrate measurable impact.
• Establish baselines and communicate architecture adoption, risk reduction, delivery flow, operational health, customer experience and continual-improvement progress.

• Trusted architecture: 100% of material solutions have an approved architecture, Service Design Package, named owner and documented…