Information Security Lead

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at

Job Function:

Technology Enterprise Strategy & Security

Job Sub Function:

Security & Controls

Job Category:

Scientific/Technology

All Job Posting Locations:

Raritan, New Jersey, United States of America

Job Description:

Johnson & Johnson is recruiting for a Cybersecurity Lead, J&J Innovative Medicines Supply Chain Deliver. The location for this role is based in Raritan, NJ.

Johnson & Johnson is the world's most comprehensive and broadly-based manufacturer of health care products and related services, for the pharmaceutical and medical devices markets. Johnson & Johnson has been caring for the world one person at a time for over 125 years. The people of the Johnson & Johnson family of companies are inspired and united working with partners in healthcare touching the lives of over a billion people throughout the world. Johnson & Johnson embraces research and science bringing innovative ideas, products and services forward to advance the health and well-being of people everywhere.

Johnson & Johnson thrives on a credo-based company culture, celebrating the uniqueness of our employees and is committed to diversity and inclusion. We are proud to be an equal opportunity employer.

The **Cybersecurity Lead Information Security & Risk Management (ISRM) Innovative Medicines Supply Chain Deliver **is a results-oriented self-starter who enjoys a fast-paced environment and is looking for opportunity to make a difference in the implementation of a revolutionizing program. They will have responsibility supporting the manager in all aspects of identifying, mitigating and remediating Cybersecurity risks related to the global deliver organization. This individual will serve as the focal point for all cybersecurity and IT internal control matters related to the program.

Key Responsibilities:

Your scope will be the Innovative Medicine Deliver sites. You will encourage through authentic leadership, driving results, and showing dedication to our values.

• Advance cybersecurity at Deliver sites, by identifying key risks and controls
• Understand and promote risk management activities associated with external regulations and internal Johnson & Johnson policies.
• Perform cybersecurity risk assessments of Deliver plants, distribution operations, and the technologies that run them while maintaining awareness of the changing threat landscape
• Provide expert cybersecurity consulting to the innovative Medicine Technology and business teams on IT and OT
• Foundational understanding of ISA62443 perdue model including network segmentation, firewall rules
• Ability to work both independently and across cultures with a distributed team is significant

Qualifications

Education:

A BA/BS degree or equivalent experience is required for this position.

Certifications in cybersecurity (CISM, CISSP, ISA-62443), audit (CISA), manufacturing or risk management (CRISC) are favored.

• ISA/IEC 62443 Cybersecurity Fundamentals Specialist
• ISA/IEC 62443 Cybersecurity Risk Assessment Specialist
• ISA/IEC 62443 Cybersecurity Design Specialist

Experience and Skills:

• Display the ability to build and develop a group of security practitioners, maintaining robust relationships with peers and business partners required
• At least five (3) years of cybersecurity working with IT/OT, automation and engineering industrial controls is required.
• Advanced knowledge of information security processes and principles in explaining the business value of cybersecurity required.
• Operating knowledge of one or more distribution processes is very advantageous as is familiarity with the System Development Life Cycle.
• Ability to learn quickly, employing different techniques as appropriate
• Ability to independently author and edit documentation of high quality, accuracy and completeness required.
• Ability to communicate technical concepts to leadership in a clear and concise format.
• Experience with pharmaceutical and distribution sites preferred, across multiple sectors and the outstanding security requirements.
• Experience performing site-based risk assessments and providing results to senior leadership required.
• Languages: Proficient in English

Other:

Your dedication to integrity and the delivery of quality results supports our Johnson and Johnson credo.

Superb communication, interpersonal, verbal and written skills are required

Ability to relate technology solutions to business needs and articulate value to accelerate the adoption of security controls and practices

Domestic and international travel, up to 20% may be encouraged, to perform site assessments of J&J distribution facilities.

#JNJTech

#LI-Hybrid

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, please contact us via or contact AskGS to be directed to your accommodation resource.

The anticipated base pay range for this position is:

$91,000-$147,200

Additional Description for Pay Transparency:

Subject to the terms of their respective plans, employees and/or eligible dependents are eligible to participate in the following Company sponsored employee benefit programs: medical, dental, vision, life insurance, short- and long-term disability, business accident insurance, and group legal insurance. Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)). Subject to the terms of their respective policies and date of hire, Employees are eligible for the following time off benefits: Vacation –120 hours per calendar year Sick time - 40 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year Holiday pay, including Floating Holidays –13 days per calendar year Work, Personal and Family Time - up to 40 hours per calendar year Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child Condolence Leave – 30 days for an immediate family member: 5 days for an extended family member Caregiver Leave – 10 days Volunteer Leave – 4 days Military Spouse Time-Off – 80 hours Additional information can be found through the link below.