Sr Manager Cybersecurity Policy

At Johnson & Johnson, we believe health is everything.

Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com

Job Function:
Technology Enterprise Strategy & Security

Job Sub Function:
Security & Controls

Job Category:
People Leader

All Job Posting Locations:
Raritan, New Jersey, United States of America

Job Description:

Job Description

Johnson & Johnson is recruiting for a Senior Manager, Cybersecurity Policy to join the Information Security & Risk Management (ISRM) team.

This role is based in Raritan, New Jersey.

As an integral member of the ISRM Cybersecurity Policy, Governance & Compliance team, you will own the enterprise cybersecurity policies and standards which mandate the cyber controls and requirements across all Johnson & Johnson.  In this role, you will work with multiple senior security team members as well as senior Information Technology leaders.

Key Responsibilities:


* Lead the development and maintenance of cybersecurity policies and standards for the enterprise, collaborating with various technical and executive stakeholders.


* Establish and manage the governance framework for the full policy lifecycle (creation, approval, communication, monitoring, and retirement).


* Communicate cybersecurity policy and standard updates through various channels and audiences, including senior leaders.


* Partner with business units and technology teams to ensure policies are understood, adopted, and enforced.


* Provide consulting support to the larger cybersecurity team on the cybersecurity policies and standards.


* Lead the development and maintenance of standard cybersecurity exhibits and requirements for inclusion in contracts and agreements.


* Collaborate with Legal, Procurement, and Risk Management teams to ensure contractual security obligations align with company policies and risk posture.


* Support various enterprise governance initiatives, providing cybersecurity input and subject matter expertise.


* Lead and develop the policy and contracts team, ensuring ongoing learning and support special projects as needed.

Qualifications

Education:


* A bachelor’s degree is required.

Prefered degree areas include Computer Science, Engineering or Information Security/Cybersecurity or equivalent.


* An advanced degree is preferred.


* Security certifications such as CGEIT, CRISC, CISSP, CISM, etc.

are preferred.

Experience and Skills:

Required:


* 8+ years of Information Security/IT risk assessment/management experience with growing responsibilities.
...