below marketmost similar roles pay hereabove market
This role pays less than
70%
of similar roles. Most pay
$159,150–$220,605
— the blue band above.
At the midpoint, this role pays about
$167k
versus about
$190k
for comparable roles.
Based on 240 similar postings.
Employer
About Johnson & Johnson
Johnson & Johnson is a multinational corporation operating in three main segments: consumer health products, pharmaceuticals, and medical devices, known for brands like Tylenol, Band-Aid, and Janssen. Industry: Pharmaceuticals & Medical Devices
Johnson & Johnson currently has
49 open roles
on FindRole.
Listed pay typically runs
$117,000–$201,250
across 40 roles with salary data.
The Senior Manager, Pre-Close Security serves as a hands-on Deal Lead within the Information Security Risk Management Acquisitions & Divestitures team. This role involves leading cybersecurity due diligence for mergers, acquisitions, divestitures, and strategic partnerships. The individual will evaluate target environments across security architecture, identity, network, endpoint, cloud, application security, data protection, vulnerability management, incident response, and cyber resilience. Key responsibilities include translating technical findings into business-relevant risk insights, managing assessment timelines, and coordinating with legal, privacy, and finance stakeholders to define Day 1 security priorities. The role requires expertise in NIST Cybersecurity Framework, ISO 27001, GDPR, and HIPAA. The position addresses the technical and regulatory challenges of integrating or separating complex systems within regulated healthcare, MedTech, pharmaceutical, and manufacturing global environments.
Serve as the primary cybersecurity lead for due diligence across mergers, acquisitions, divestitures, and strategic partnerships.
Evaluate target environments for risks in security architecture, identity, cloud, data protection, and incident response.
Translate technical findings into business-relevant recommendations regarding risk acceptance, contractual protections, and remediation costs.
Coordinate with Legal, Finance, and Corporate Development teams to align expectations and escalate material risk issues.
Define Day 1 security priorities and transition diligence findings to post-close integration or separation teams.
Improve diligence playbooks, risk taxonomies, and reporting routines to increase consistency and speed across the portfolio.
Provide guidance and mentorship to managers, analysts, and external advisors to ensure consistent use of approved methods.
What we're looking for
Bachelor's degree in Information Security, Computer Science, Engineering, Information Systems, Business, or a related discipline.
Advanced degree (MBA, MS, or equivalent) (preferred).
8+ years of progressive experience in cybersecurity, information risk management, technology delivery, security architecture, M&A transaction support, due diligence, integration, or separation.
Demonstrated experience leading or materially supporting cybersecurity due diligence, acquisition assessments, divestiture assessments, third-party security reviews, or complex risk assessments.
Strong technical background across security architecture, identity, cloud, endpoint, network, application security, data protection, vulnerability management, incident response, and cyber resilience.
Working knowledge of privacy, legal, regulatory, and enterprise security obligations relevant to healthcare, MedTech, pharmaceutical, or manufacturing environments.
Strong understanding of recognized cybersecurity frameworks including NIST CSF, ISO 27001, NIST 800-series, GDPR, and HIPAA.
Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSP, CCSK, or equivalent credentials (preferred).
Identity and Access Management
Cloud Security
Application Security
Platform Security
Security Systems Engineering
Zero Trust
NIST CSF
NIST 800-53
ISO 27001
SOC 2
SaaS
Automation
System Integration
Coding
Data Governance
AI
CISSP
CCSP
GIAC