Supply Chain Deliver Security Senior IT Manager

Johnson & Johnson, Inc. is recruiting for a Supply Chain Deliver Senior IT Security Manager, located in Raritan, NJ, or other locations as listed.
**Key Responsibilities**:
Lead the execution of the cybersecurity program for DELIVER, including:
- Provide security SME consulting and security architecture guidance on technology projects. Contribute SME knowledge to help shape the strategy and security program for J&J Customer facing and future cloud IT solutions.
- Acquire agreement, schedule, and then perform assessments of cyber security risk posture of logistics technology, sites, and vendors. Rank risks, provide solution/remediation recommendations and influence adoption.
- Lead development and adoption of metrics and dashboards to enable effective management of risk
- Lead program to assess and perform design reviews of solutions and environments, actioning the output of scanning tools and penetration testing to improve risk posture.
Continuously improve the cyber security program, for example:
- Support identification and implementation of security tools and design patterns (e.g., IDR, AV, SIEM, deception technology).
- Develop technical standards and associated training materials and implementation guidance.
- Drive process improvements and efficiency gains to increase value from existing resources
- Actively watch new threats and vulnerabilities, collaborate with IT and Engineering and business teams on appropriate actions to address them
Develop team members and establish a network of security champions within the DELIVER organization.
**Qualifications** Education**:
Bachelor of Science of Computer Science or Information Security, MS in Information security preferred
**Experience and Skills**:
**Required**:
- 8+ years working in IT and/or Engineering with a security focus is required, including hands-on implementation level understanding of key security technologies and controls (e.g., access control, IDP/IDR, anti-malware, patch management, encryption technologies, forensics etc.)
- Experience analyzing IT Technology architecture to identify security gaps and crafting solutions.
- Experience performing security audits and assessments based on technical security frameworks such as NIST 800-53/800-82, ISO 27001, IEC 62433, RG 5.71, NEI 08-09, etc.
- Solid grasp of the security landscape including trends in process, tooling and threats.
- Consistent record of working within large projects and prioritizing multiple areas.
- Big Picture/Attention to Detail - align strategic and tactical security aspects.
- Results Orientation - creatively lead the team to deliver against timelines.
- Superb communication and creative problem-solving skills.
- Ability to collaborate and influence a diverse group of customers at all levels of the organization, cross sector, cross-functionally and globally required.
- Demonstrable ability to influence/collaborate to get to desired result required, and establish oneself as an inspiring leader with expertise in the space.
The location is flexible NA, LATAM and EMEA and may require 10-15% travel.
**Preferred**:
- Understanding of cloud, virtualized environments and emerging digital capabilities.
- Hands-on experience of integration with hospitals and health-care environments.
- Experience of penetration testing and tools
- Experience working with incident response team
**Other**:
- 10% - 15% travel, including international
- Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or other relevant certifications preferred
Johnson & Johnson is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
**Primary Location**
United States-New Jersey-Raritan-1003 US HIghway 202
**Other Locations**
Latin America-Brazil-São Paulo, Europe/Middle East/Africa-Ireland-Cork-LittleIsland, United States-Pennsylvania-Horsham, United States-Pennsylvania-Spring House, Belgium-Antwerp-Beerse, Switzerland-Zug-Zug
**Organization**
Johnson & Johnson Services Inc. (6090)
**Job Function**
Info Technology
**Requisition ID**
W

---