Information Security Analyst

At Johnson & Johnson, we believe health is everything.

Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com

Job Function:
Data Analytics & Computational Sciences

Job Sub Function:
Business Intelligence

Job Category:
Business Enablement/Support

All Job Posting Locations:
São José dos Campos, São Paulo, Brazil

Job Description:

The Information Security Analyst will ensure appropriate security controls are implemented for key applications in the Commercial and R&D areas and product groups.

This role involves working closely with business and IT to develop effective security strategies in alignment with company policies and other regulatory requirements.
 

Key Responsibilities:

Identify, assess, and advise on cybersecurity risks within the Commercial and R&D product groups;

Conduct application and third-party risk assessments to help project teams address security concerns.

Provide mentorship to help integrate security into processes.

Handle the security vulnerabilities linked to the IT infrastructure that underpins operational technologies.

Respond appropriately to any incidents and issues along with the appropriate remediation actions;

Develop and deliver training and awareness programs to educate employees and partners on information security practices;

Stay informed on industry trends, emerging threats, and regulatory changes to improve security measures related to the information technology space.

Experience in SOX, IAPP, GxP, and Privacy compliance is preferred;

 

Qualifications:

Bachelor’s degree or equivalent in Information Technology, Computer Science, Computer Engineering, or a related field;

2 years of experience in information security, risk assessment, or compliance within a commercial and/or R&D context;

Familiarity with security frameworks (e.g., NIST, ISO 27001) and risk management methodologies;

Good analytical skills with attention to detail and a proactive approach to identifying risks.

Interpersonal skills both verbal and written are required with the ability to communicate technical concepts to non-technical customers optimally.

Johnson & Johnson Family of Companies are equal opportunity employers, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, protected veteran status, disability status, or any other characteristic protected by law.

 

 

Required Skills:
Security Analysis, Security Intelligence, Security Risk Analysis

 

 

Pre...