Senior Manager, Pre-Close Security

Johnson & Johnson

. Serve as the primary ISRM A&D cybersecurity lead for assigned transactions .

Posted 10/26/2026full-timeRemote • United StatesSenior💰 $122,000 - $212,750 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity due diligence, risk management, and security architecture, with a strong ability to translate technical findings into actionable business recommendations. Proven experience in coordinating complex transactions and managing multiple stakeholders in high-pressure environments.

Highest-signal resume keywords

Cybersecurity Due DiligenceSecurity ArchitectureRisk ManagementNIST Cybersecurity FrameworkCISSP

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityInformation Risk ManagementSecurity ArchitectureCloud SecurityEndpoint SecurityNetwork SecurityApplication SecurityData ProtectionVulnerability ManagementIncident Response

Soft Skills

Excellent Communication SkillsAnalytical SkillsProblem-SolvingMentoringAccountability

Tools & Technologies

Risk TaxonomiesDiligence PlaybooksControl LibrariesDecision RecordsRACI Models

Certifications & Qualifications

CISSPCISMCRISCCISACCSPCCSK

Industry Keywords

M&A TransactionsRegulated EnvironmentsHealthcarePharmaceuticalLife Sciences

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Serve as the primary ISRM A&D cybersecurity lead for assigned transactions
Coordinate diligence activities, assessment timelines, evidence needs, and documentation for deal teams and leadership
Evaluate target environments across security architecture, identity, network, endpoint, cloud, application security, data protection, vulnerability management, incident response, third-party risk, and cyber resilience
Lead questionnaire review, management meeting preparation, outside-in assessment coordination, documentation analysis, follow-up inquiries, advisor engagement, and evidence consolidation
Translate technical findings into recommendations for risk acceptance, contractual protections, closing conditions, Day 1 priorities, remediation costs, integration dependencies, and post-close commitments
Partner with Corporate Development, Legal, Privacy, Finance, Technology Services, ISRM owners, business technology teams, external advisors, and deal sponsors
Escalate material risk issues through the Director and appropriate governance channels
Translate diligence findings into Day 1 objectives, minimum security expectations, TSA considerations, risk register entries, dependency tracking, and handoff materials
Improve diligence playbooks, questionnaires, risk taxonomies, scoring methods, templates, dashboards, reporting routines, intake workflows, and evidence standards
Guide managers, analysts, advisors, and cross-functional contributors while promoting accountability, mentoring, lessons learned, and consistent A&D cybersecurity methods

Requirements

What you’ll need

Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline
8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration or separation, or related disciplines
Experience leading or materially supporting cybersecurity due diligence, acquisition assessments, divestiture assessments, third-party security reviews, or complex risk assessments in time-sensitive business environments
Strong technical background across security architecture, identity and access management, cloud and infrastructure security, endpoint security, network security, application security, data protection, vulnerability management, incident response, logging and monitoring, third-party risk, and cyber resilience
Ability to analyze fragmented or incomplete diligence evidence, identify risk themes, ask effective follow-up questions, troubleshoot technical ambiguity, and distinguish material transaction risk from routine operational findings
Experience translating technical cybersecurity findings into business-focused recommendations, risk narratives, remediation priorities, Day 1 considerations, contractual inputs, and post-close handoff requirements
Working knowledge of privacy, legal, regulatory, and enterprise security obligations relevant to regulated global environments
Understanding of NIST Cybersecurity Framework, ISO 27001, NIST 800-series publications, GDPR, HIPAA, and other applicable requirements
Experience coordinating multiple workstreams, stakeholders, vendors, advisors, and deadlines across concurrent deals or complex programs
Excellent written and verbal communication skills for technical and non-technical audiences
Ability to operate with confidentiality, urgency, sound judgment, and professionalism in ambiguous, high-pressure transaction environments
Advanced degree (MBA, MS, or equivalent) preferred
Preferred experience as a cybersecurity Deal Lead or workstream lead for acquisitions, divestitures, licensing transactions, minority investments, strategic partnerships, or joint ventures
Preferred experience developing or operating A&D cybersecurity diligence playbooks, questionnaires, control libraries, risk-scoring methods, issue logs, decision records, RACI models, and handoff criteria
Preferred experience performing outside-in cyber assessments, threat exposure reviews, breach history analysis, vendor risk analysis, or technical architecture reviews
Preferred experience in regulated healthcare, pharmaceutical, MedTech, manufacturing, life sciences, or similarly complex global environments
Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSP, CCSK, or equivalent credentials preferred

Benefits

Comp & perks

Retirement plan (pension)
Savings plan (401(k))
Vacation – 120 hours per calendar year
Sick time – 40 hours per calendar year; 48 hours per calendar year for employees residing in Colorado; 56 hours per calendar year for employees residing in Washington
Holiday pay, including Floating Holidays – 13 days per calendar year
Work, Personal and Family Time – up to 40 hours per calendar year
Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year
Caregiver Leave – 80 hours in a 52-week rolling period
Volunteer Leave – 32 hours per calendar year
Military Spouse Time-Off – 80 hours per calendar year
Remote work options may be considered on a case-by-case basis if approved by the Company