A&D Post-Close Security Director

Johnson & Johnson

. Define, govern, and continuously improve the enterprise cybersecurity approach for post-close acquisitions, divestitures, licensing arrangements, separations, integrations, minority investments, and strategic partnerships .

Posted 10/5/2026full-timeRemote • United StatesLead💰 $150,000 - $258,750 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity strategy, governance, and risk management, particularly in the context of mergers and acquisitions. Proven ability to lead cross-functional teams, manage complex portfolios, and communicate effectively with executives in highly regulated environments.

Highest-signal resume keywords

Cybersecurity Strategy DevelopmentRegulatory Compliance ExpertiseExecutive Communication SkillsRisk Management and RemediationCross-Functional Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityInformation Risk ManagementSecurity ArchitectureIdentity and Access ManagementCloud SecurityEndpoint SecurityIncident ResponseVulnerability ManagementData ProtectionThird-Party Risk Management

Soft Skills

Executive LeadershipCommunicationProblem-SolvingChange ManagementCollaboration

Tools & Technologies

NIST Cybersecurity FrameworkISO 27001GDPRHIPAAAutomation Tools

Certifications & Qualifications

CISSPCISMCRISCCISACCSK

Industry Keywords

Mergers and AcquisitionsDivestituresStrategic PartnershipsRegulated HealthcarePharmaceuticalsMedTechManufacturing

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Define, govern, and continuously improve the enterprise cybersecurity approach for post-close acquisitions, divestitures, licensing arrangements, separations, integrations, minority investments, and strategic partnerships
Provide executive leadership and oversight for post-close mobilization, Day 1 stabilization, transition governance, risk remediation, integration and separation execution, TSA delivery and exit, and ongoing portfolio performance
Define post-close cybersecurity strategy, governance, standards, operating rhythms, decision rights, and escalation paths
Convert deal scope, due diligence findings, Day 1 requirements, regulatory obligations, TSA assumptions, milestones, risks, and dependencies into prioritized execution plans
Provide executive and technical oversight for identity, endpoints, infrastructure, cloud, applications, data protection, monitoring, incident response, third parties, regulatory obligations, and TSA delivery and exit
Troubleshoot complex cybersecurity and technology issues, challenge proposed architectures and exceptions, and make risk-informed decisions
Ensure findings are prioritized, assigned, evidenced, escalated, and closed or formally accepted, with control validation and reporting
Oversee concurrent deals, workstreams, vendors, transition services, budgets, milestones, and dependencies
Drive automation for intake, tracking, evidence, controls, notifications, dashboards, metrics, and reporting
Communicate progress, regulatory implications, risks, decisions, dependencies, business impacts, and resource needs to executives and governance forums
Maintain playbooks, runbooks, templates, RACI models, capability standards, lessons learned, handoff criteria, and Definition of Done requirements
Lead and develop managers, cybersecurity professionals, deal leads, project managers, and cross-functional contributors

Requirements

What you’ll need

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline
12+ years of progressive experience in cybersecurity, information risk management, technology leadership, M&A transaction support, integration or separation, or related disciplines
Demonstrated experience leading cybersecurity programs supporting acquisitions, divestitures, licensing, minority investments, strategic partnerships, or other complex business transactions
Comprehensive regulatory and compliance insight
Broad technical expertise across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, security operations, incident response, third-party risk, privacy, and cyber resilience
Experience troubleshooting complex cybersecurity and technology issues at a Director level
Experience partnering with ISRM policy, capability, architecture, risk, and control owners
Experience influencing executives and driving cross-functional initiatives across highly matrixed, global environments
Strong understanding of NIST Cybersecurity Framework, ISO 27001, NIST 800-series publications, GDPR, HIPAA, and other applicable requirements
Experience managing portfolios involving concurrent deals, assessments or workstreams, vendors, senior stakeholders, dependencies, and time-sensitive decisions
Exceptional executive communication and presentation skills
Ability to navigate ambiguity, protect transaction confidentiality, drive organizational change, and improve repeatability through data, tools, automation, and disciplined governance
Preferred: experience developing or operating A&D cybersecurity playbooks, questionnaires, control libraries, risk-scoring methods, RACI models, handoff criteria, and phase-based transaction standards
Preferred: experience designing automation for intake, evidence collection, risk reporting, workflow orchestration, dashboards, and portfolio governance
Preferred: experience partnering with Corporate Development, Legal, Privacy, Finance, Technology Services, business technology teams, IMO/SMO functions, external advisors, and managed service providers
Preferred: experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, or similarly complex global environments
Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSK, or equivalent credentials preferred

Benefits

Comp & perks

Consolidated retirement plan (pension)
Savings plan (401(k))
Long-term incentive program
Vacation –120 hours per calendar year
Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year
Holiday pay, including Floating Holidays –13 days per calendar year
Work, Personal and Family Time - up to 40 hours per calendar year
Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year
Caregiver Leave – 80 hours in a 52-week rolling period10 days
Volunteer Leave – 32 hours per calendar year
Military Spouse Time-Off – 80 hours per calendar year