Cyber Security Risk Index Specialist (Fixed Term Contract)

At Johnson & Johnson,we believe health is everything.

Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com .

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world.

We provide an inclusive work environment where each person is considered as an individual.

At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:
Project/Program Management Group

Job Sub Function:
Project/Program Management

Job Category:
Professional

All Job Posting Locations:
São José dos Campos, São Paulo, Brazil, São Paulo, Brazil

Job Description:

The CSRI Specialist is responsible for supporting the Cyber Security Risk Index (CSRI) program through assisting site and BIS teams with loading inventories, data governance, reporting support, training development, and framework alignment.

The role serves as a key liaison between site teams, ISRM BIS, OT Security Services, and the Metrics & Reporting team to ensure CSRI data is accurate, complete, and effectively translated into actionable cyber risk insights.

The successful candidate will manage inventory onboarding activities, maintain underlying CSRI data structures, support dashboard and reporting enhancements, develop user training materials, and ensure continued alignment with cybersecurity frameworks including NIST CSF and NIST SP 800-82.

Key Responsibilities

CSRI Inventory & Data Management


* Support loading of site inventory and checklists into the CSRI process.


* Review and validate inventory data before import into Asset Management.


* Support maintenance of risk scenario mappings, site controls data, and supporting reference data.


* Ensure data quality standards are maintained across inventories, questionnaires, and reporting systems

Training & Communications


* Develop and maintain CSRI training materials, user guides, process documentation, and awareness presentations.


* Deliver training sessions to site personnel, BIS teams, and other stakeholders.


* Support communication of CSRI process changes, releases, and framework updates.


* Create knowledge articles, FAQs, and onboarding packages for new users.


* Assist with change management activities associated with CSRI releases and process improvements.

Metrics & Reporting Support


* Partner with the Metrics & Reporting team to maintain and improve CSRI dashboards and reporting capabilities.


* Assist in defining reporting requirements and validating reporting outputs.


* Support dashboard test...