Prof Quality Steward – Product Security

Johnson & Johnson

. Provide quality and compliance guidance for cybersecurity activities, including security planning, threat modeling, cybersecurity risk assessments, security requirements, testing, SBOMs, and vulnerability management .

Posted 11/3/2026full-timeUnited StatesMid-LevelSenior💰 $81,000 - $131,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity quality and compliance, integrating risk management and design controls throughout the product lifecycle. Proficient in regulatory submissions and audits, with a strong focus on medical-device cybersecurity standards and practices.

Highest-signal resume keywords

Cybersecurity ComplianceQuality Management SystemsRisk ManagementThreat ModelingRegulatory Submissions

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Risk AssessmentsVulnerability ManagementSecurity TestingDesign ControlsVerification And ValidationChange ControlSBOMsTechnical Documentation ReviewProduct SecuritySystems Engineering

Soft Skills

Strong CommunicationCross-Functional Collaboration

Certifications & Qualifications

CQECSQERACCSSLPCISSPCISA

Industry Keywords

Medical DeviceMedTechDigital HealthFDA Cybersecurity ExpectationsISO 14971ISO 13485IEC 62304IEC 81001-5-1AAMI TIR57AAMI TIR97

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Provide quality and compliance guidance for cybersecurity activities, including security planning, threat modeling, cybersecurity risk assessments, security requirements, testing, SBOMs, and vulnerability management
Serve as the Quality Steward for Product Security across assigned products, platforms, and programs throughout the product lifecycle
Review Product Security deliverables and objective evidence for completeness, traceability, consistency, and alignment with QMS and cybersecurity processes
Integrate cybersecurity activities into design controls, product risk management, Design History Files, and lifecycle processes
Partner with Product Security, R&D, Quality, and Regulatory Affairs to identify and resolve documentation, process, and compliance gaps
Support cybersecurity content and evidence for regulatory submissions, audits, inspections, and responses to regulatory authorities
Provide quality stewardship for postmarket cybersecurity and vulnerability management, including risk assessments, remediation documentation, product changes, and coordinated vulnerability disclosure activities
Support governance of SBOMs and third-party/open-source software cybersecurity risk throughout the product lifecycle
Assess Product Security quality impacts associated with product changes, software releases, supplier changes, platform migrations, and lifecycle transitions
Support development and continuous improvement of Product Security procedures, work instructions, templates, metrics, and training
Monitor evolving medical-device cybersecurity regulations and standards and translate requirements into practical Product Security and Quality System processes

Requirements

What you’ll need

Bachelor’s degree in Engineering, Computer Science, Cybersecurity, Information Systems, Quality, Biomedical Engineering, or a related technical discipline
4+ years of experience in medical-device Quality, software quality, design assurance, product security, cybersecurity compliance, systems engineering, or a related regulated product-development discipline
Experience with design controls, risk management, verification and validation, change control, and Quality Management Systems
Working knowledge of threat modeling, cybersecurity risk management, vulnerability management, security testing, and SBOMs
Experience reviewing technical documentation and objective evidence for completeness, traceability, and compliance
Strong communication and cross-functional collaboration skills
Medical device, MedTech, digital health, or other regulated-product experience preferred
Knowledge of FDA medical-device cybersecurity expectations, ISO 14971, ISO 13485, IEC 62304, IEC 81001-5-1, and AAMI TIR57/TIR97 preferred
Experience reviewing threat models, cybersecurity risk assessments, security requirements, penetration-test reports, SBOMs, and vulnerability assessments preferred
Experience supporting regulatory submissions, audits, inspections, or postmarket cybersecurity activities preferred
Relevant certifications such as CQE, CSQE, RAC, CSSLP, CISSP, or CISA preferred

Benefits

Comp & perks

Consolidated retirement plan (pension)
Savings plan (401(k))
Eligibility for the Company’s long-term incentive program
Vacation – 120 hours per calendar year
Sick time – 40 hours per calendar year
Holiday pay, including Floating Holidays – 13 days per calendar year
Work, Personal and Family Time – up to 40 hours per calendar year
Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year
Caregiver Leave – 80 hours in a 52-week rolling period
Volunteer Leave – 32 hours per calendar year
Military Spouse Time-Off – 80 hours per calendar year