Function
Technology Enterprise Strategy & Security
Sub function
Security & Controls
Category
Senior Manager, Security & Controls (PL8)
Location
High Wycombe / United Kingdom
Date posted
Jun 11 2025
Requisition number
R-018728
Work pattern
Hybrid Work
Description
At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com

JOB DESCRIPTION:

Job Description
Johnson & Johnson is recruiting for a Senior Manager, Cyber Risk Management to join the Information Security & Risk Management (ISRM) team. This role may be based at J&J locations in the United States or United Kingdom, with the Raritan, NJ location preferred.
Please note that this role is available across multiple countries and may be posted under different requisition numbers to comply with local requirements. While you are welcome to apply to any or all of the postings, we recommend focusing on the specific country(s) that align with your preferred location(s):
Raritan, NJ US - Requisition Number: R-001945
Remember, whether you apply to one or all of these requisition numbers, your applications will be considered as a single submission.
Are you ready to use your technical knowledge to change the trajectory of health for humanity? We have a position for you!
Caring for the world, one person at a time has inspired and united the people of Johnson & Johnson for over 130 years. We embrace research and science - bringing innovative ideas, products, and services to advance the health and well-being of people.
At Johnson & Johnson, we believe good health is the foundation of vibrant lives, thriving communities and forward progress. That’s why for more than 130 years, we have aimed to keep people well at every age and every stage of life. Today, as the world’s largest and most broadly-based healthcare company, we are committed to using our reach and size for good. We strive to improve access and affordability, create healthier communities, and put a healthy mind, body and environment within reach of everyone, everywhere. Every day, our more than 130,000 employees across the world are blending heart, science and ingenuity to profoundly change the trajectory of health for humanity.
Thriving on a diverse company culture, celebrating the uniqueness of our employees, and committed to inclusion. Proud to be an equal opportunity employer!
As a member of the ISRM integrated Risk Management team, you will own the cybersecurity risk management framework, including definition and governance of security risk management processes for the identification, management, and reporting of cyber risks. You will also support the Enterprise Risk Management initiative, providing both cyber and strategic input to help shape various aspects of the program. In this role, you will work with multiple senior security team members as well as senior Information Technology leaders.

EDUCATION:

• A bachelor’s degree in Computer Science, Engineering or Information Security/Cybersecurity or equivalent degree is required.
• An advanced degree is preferred.

• Lead the company’s cybersecurity risk management strategy and develop an effective risk management framework.
• Implement an integrated approach to risk management by collaborating with the cybersecurity team and the Enterprise Risk Management team.
• Communicate cybersecurity risks to senior leaders and provide input on remediation plans.
• Enhance cyber risk management processes and evaluate proposed security issue remediation plans.
• Define metrics for issues and policy exceptions, including trend analysis and reporting.
• Offer consulting support to the security team on risk understanding and remediation.
• Drive the Governance, Risk and Compliance (GRC) tool strategy and collaborate on release plans.
• Lead and develop the team, ensuring ongoing learning and support special projects as needed.