Director, Product Security

Johnson & Johnson

. Define and lead the global product security strategy aligned with DePuy Synthes business objectives and regulatory requirements .

Posted 11/10/2026full-timeUnited StatesLead💰 $154,000 - $265,650 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in defining and leading product security strategies, ensuring compliance with global cybersecurity regulations, and managing cybersecurity risk within regulated industries. Proven ability to lead global teams and communicate effectively with stakeholders at all levels.

Highest-signal resume keywords

Product Security Strategy DevelopmentCybersecurity Risk ManagementVulnerability ManagementExecutive-Level CommunicationTeam Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure Product DevelopmentPenetration TestingThreat ModelingIncident ResponseCybersecurity Frameworks

Soft Skills

Stakeholder ManagementInfluencing Skills

Tools & Technologies

Cybersecurity ToolsSecure Development Lifecycle Practices

Certifications & Qualifications

CISSPCISMCSSLP

Industry Keywords

Medical DevicesHealthcare TechnologyLife SciencesFDA Cybersecurity GuidanceIEC 62304ISO 14971

Tech Stack

Tools & technologies

CloudCyber SecurityIoT

About the role

Key responsibilities & impact

Define and lead the global product security strategy aligned with DePuy Synthes business objectives and regulatory requirements
Establish and oversee product security governance, standards, and secure development lifecycle practices across hardware, software, and connected medical devices
Partner with R&D, Quality, Regulatory Affairs, and IT to integrate cybersecurity risk management into product design, development, and post-market activities
Lead global teams and external partners delivering product security services, tools, and capabilities
Oversee vulnerability management, threat modeling, penetration testing, and product-security incident response activities
Ensure compliance with global cybersecurity and medical-device regulations, standards, and guidance, including FDA, ISO, and IEC requirements
Provide executive-level reporting and insights on product security risks, trends, and performance to senior leadership
Build product security culture through training, awareness, and continuous improvement initiatives
Report into the DePuy Synthes Technology organization

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Engineering, Information Security, or a related technical field
10–12 years of experience in cybersecurity or product security leadership roles, including global scope and matrixed environments
Demonstrated experience securing complex software-enabled or connected products, preferably within regulated industries
Strong knowledge of secure product development, vulnerability management, and cybersecurity risk management frameworks
Proven ability to lead and develop high-performing global teams and service-based operating models
Executive-level communication and stakeholder management skills, with the ability to influence across functions
English fluent; additional languages are a plus
Up to 20% domestic and international travel
Preferred: Master’s degree in Cybersecurity, Engineering, or Business Administration
Preferred: Experience in medical devices, healthcare technology, or life sciences
Preferred: Familiarity with FDA cybersecurity guidance, IEC 62304, ISO 14971, and related standards
Preferred: Experience enabling cybersecurity capabilities within shared services or global enablement models
Preferred: Background in cloud, embedded systems, or IoT security
Preferred certifications: CISSP, CISM, CSSLP, or equivalent

Benefits

Comp & perks

Consolidated retirement plan (pension)
Savings plan (401(k))
Long-term incentive program
Vacation – 120 hours per calendar year
Sick time – 40 hours per calendar year
Holiday pay, including Floating Holidays – 13 days per calendar year
Work, Personal and Family Time – up to 40 hours per calendar year
Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year
Caregiver Leave – 80 hours in a 52-week rolling period
Volunteer Leave – 32 hours per calendar year
Military Spouse Time-Off – 80 hours per calendar year
Medical, dental, and vision benefits as provided under applicable plans or agreements
Inclusive interview accommodations for applicants with disabilities