Director, AI Security

Johnson & Johnson

. Establish and scale enterprise AI security capabilities across models, harnesses, agents, end-user AI usage, supply chains, runtime protection, assurance, observability, and applications .

Posted 11/11/2026full-timeRemote • New Jersey • United StatesLead💰 $154,000 - $265,650 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in establishing and scaling AI security capabilities, including identity and access enforcement, runtime protection, and incident response integration. Proficient in managing AI security teams and vendor relationships while ensuring compliance with industry standards and best practices.

Highest-signal resume keywords

AI Security Capabilities ImplementationIdentity And Access EnforcementAI Telemetry IntegrationCybersecurity Incident ResponseVendor Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AI SecurityCybersecurityApplication SecuritySecurity EngineeringAI DiscoveryData Loss Prevention (DLP)Cloud SecurityDetection EngineeringAdversarial TestingModel Assessment

Soft Skills

Executive Stakeholder ManagementTechnical JudgmentCommunication SkillsTeam Leadership

Tools & Technologies

Generative AI ServicesAI/ML LifecyclesModel APIsMLOps PipelinesNIST AI RMFOWASP AI Security GuidanceMITRE ATLAS

Certifications & Qualifications

CISSPCISMGAIPSGASAEAAISM

Industry Keywords

HealthcarePharmaceuticalMedTechAI Security StandardsRegulated Environments

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Establish and scale enterprise AI security capabilities across models, harnesses, agents, end-user AI usage, supply chains, runtime protection, assurance, observability, and applications
Establish AI discovery to identify enterprise use of generative AI, applications, agents, and models and prioritize security gaps
Establish end-user AI usage management, access enforcement, and data protection controls
Own AI agent identity and authorization security, including non-human identities, credentials, service accounts, and least-privilege permissions
Integrate security testing and protective controls throughout AI development, deployment, and operation
Establish AI onboarding and assurance, including model assessments, agent reviews, red-team guidance, supply-chain assurance, and runtime monitoring
Define production security approval criteria for AI models, agents, applications, and frontier capabilities
Implement controls against model/data poisoning, compromised components, and model exposures
Ensure continuous adversarial testing for prompt injection and other high-impact threats; validate defenses and remediation
Integrate AI telemetry and detections into security operations and partner on detection, triage, and incident response
Deploy advanced models to identify and prioritize cybersecurity exposures, accelerate investigations, and expedite remediation with safeguards and human validation
Partner with AI Governance, Privacy, Architecture, Risk Management, Cyber Defense, GSO, IAM, Vulnerability Management, Application Security, and business teams
Own AI security vendor relationships, budget, vendor selection, performance management, and capability rationalization
Drive timely remediation of AI-related exposures
Own standards adoption, control-effectiveness measurement, executive risk communication, roadmap, and investment planning
Lead and develop an enterprise AI security team

Requirements

What you’ll need

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, or a related discipline, or equivalent experience
12+ years of progressive experience in cybersecurity, application security, security engineering, or related disciplines
Recent hands-on experience securing AI-enabled systems
Experience implementing, operating, and scaling AI security capabilities across generative AI services, applications, agents, and models
Working understanding of AI/ML lifecycles, LLMs, RAG, model APIs, and agent tool integrations
Expertise in AI discovery, identity and access enforcement, least-privilege agent permissions, secrets protection, DLP, and runtime safeguards
Ability to assess and mitigate prompt injection, sensitive data exposure, excessive agency, tool misuse, insecure output handling, model theft, adversarial manipulation, poisoning, and AI supply-chain compromise
Experience in cloud and platform security
Experience integrating AI security telemetry with security operations and incident response
Experience with detection engineering, investigation, containment, and remediation
Ability to lead technical security teams and manage vendors, budgets, and concurrent capability deployments
Experience partnering across engineering, security operations, and business stakeholders in a global, matrixed enterprise
Strong executive stakeholder management, technical judgment, and communication skills
Preferred experience with production multi-agent systems and MCP integrations
Preferred experience evaluating open-weight and fine-tuned models, adversarial evaluation suites, NIST AML guidance, MITRE ATLAS, and OWASP AI security guidance
Preferred experience embedding AI security into software delivery and MLOps pipelines
Preferred advanced ML engineering, frontier model research, or adversarial AI research experience
Working knowledge of NIST AI RMF, OWASP LLM/agentic security guidance, and MITRE ATLAS
Preferred experience applying frontier AI to cybersecurity use cases
Preferred experience scaling AI security in regulated healthcare, pharmaceutical, or MedTech environments
Preferred contributions to the AI security field through disclosed vulnerabilities, research, open-source tools, or industry initiatives
Experience with skill security and multi-turn agentic security
CISSP, CISM, or equivalent certifications preferred; GAIPS, GASAE, or AAISM particularly desirable

Benefits

Comp & perks

Pension plan
401(k) savings plan
Long-term incentive program
Vacation – 120 hours per calendar year
Sick time – 40 hours per calendar year; 48 hours for Colorado residents; 56 hours for Washington residents
Holiday pay, including Floating Holidays – 13 days per calendar year
Work, Personal and Family Time – up to 40 hours per calendar year
Parental Leave – 480 hours within one year of birth/adoption/foster care of a child
Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year
Caregiver Leave – 80 hours in a 52-week rolling period
Volunteer Leave – 32 hours per calendar year
Military Spouse Time-Off – 80 hours per calendar year
Inclusive interview accommodations
Equal opportunity employment