OT Cyber Security Service Owner

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com.

Job Function: Project/Program Management Group

Job Sub Function: Project/Program Management

Job Category: Professional

All Job Posting Locations: São José dos Campos, São Paulo, Brazil, São Paulo, Brazil

Job Description

Role Purpose

The OT Service Owner is responsible for establishing, operating, governing, and continuously improving end-to-end OT cybersecurity services, including USB/removable-media security and endpoint protection. The role provides service-level accountability across these capabilities, rather than focusing on a single technology or vendor. The role will transition OT protection capabilities from deployment-focused activities into sustainable, measurable and supportable global services. The Service Owner acts as the central coordination point across Service Operations, OT Security Engineering, SOC, site cybersecurity teams, Quality/Compliance, vendors and other technology stakeholders, ensuring that USB security and endpoint protection are managed through a consistent service framework. The Service Owner is accountable for ensuring that technology components, operational processes and organizational responsibilities function as integrated services from request through operation, monitoring, incident response, change, lifecycle management and continuous improvement, while respecting OT availability, compatibility and site operational requirements.

Key Responsibilities

• End-to-End Service Ownership Lead the operational model for OT cybersecurity services, including USB/removable-media security and endpoint protection, across the complete lifecycle.
• Establish clear accountability between Service Operations, Engineering, SOC, site teams, Quality/Compliance and other supporting functions.
• Define and maintain service boundaries, responsibilities, blocking issue and operational.
• Drive the transition from project/deployment activities into sustainable services with defined operational readiness and support acceptance criteria.
• Ensure new site, endpoint and removable-media protection demand is handled through a defined intake, prioritization and onboarding process.
• Own and mature the operational support model, including service health monitoring, protection coverage, update coordination and lifecycle support across endpoint and removable-media security platforms.
• Act as the service-level coordination point for endpoint and removable-media security detections and operational incidents, working with SOC, Engineering and site teams on response and service restoration.
• Establish and operate a consistent governance structure across OT protection services, including service reviews, risk and exception tracking, and blocking issue of coverage or support gaps.
• Lead the service important metric and management-information framework, covering service availability, endpoint and removable-media protection coverage, platform health, incident trends and operational adoption.
• Partner with OT sites to ensure protection capabilities are not only deployed but operationally embraced and supported within local production and maintenance processes.
• Ensure that the operational documentation required to run the service is defined, maintained and integrated.
• Coordinate the service with Quality, Compliance and cybersecurity-control requirements.
• Ensure OT protection services are correctly represented within the enterprise service-management ecosystem, including service catalog entries, configuration records, support groups and service dependencies.
• Work closely with OT Security Engineering while maintaining a deliberate separation between service ownership and engineering ownership.
• Support the evolution of OT protection services across endpoint and removable-media security, aligning service improvements with site needs, technology roadmaps and operational constraints.

Required Qualifications

• Essential Bachelor’s degree in information technology, Cybersecurity, Engineering, or related field.
• 3-5 years of experience in IT/OT Service Management, Cybersecurity Operations, Infrastructure Services or OT Security.
• Advanced English
• Solid understanding of end-to-end service ownership operating models, with working knowledge of endpoint protection and USB/removable-media security in OT environments.