IT Endpoint Security Manager

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at

Job Function:

Technology Enterprise Strategy & Security

Job Sub Function:

Security & Controls

Job Category:

Scientific/Technology

All Job Posting Locations:

São José dos Campos, São Paulo, Brazil

Job Description:

An internal pre-identified candidate for consideration has been identified. However, all applications will be considered.

The IT Endpoint Security Manager (Cyber Security) will handle the engineer/design of endpoint security solutions, automate, and integrate activities related to endpoint protection tools and metrics. Covering Workstations and Servers.

In addition, create the appropriate documentation related to automation and integration following Johnson & Johnson standards.

Key Responsibilities:

• Evaluate and engineer solutions related to Endpoint Security (enterprise scale).
• Define solutions for protection in the server environment (Windows, Linux, Storage)
• Automate and Integrate solutions through scripts and API calls.
• Document projects, technologies, and rollouts following standards (such as SDLC).
• Interact with other ISRM groups to troubleshoot problems and coordinate a quick resolution.
• Train the operational teams to provide L1 support level as needed.
• Conduct security assessments, determine deviations from J&J policies, assess the level of risk, and recommend appropriate mitigation countermeasures.
• Develop and maintain reports, metrics, key performance indicators, key risk indicators, trends, operations status, playbooks, work instructions, and operational procedures.
• Maintain knowledge of applicable ISRM policies, regulations, and compliance documents specifically related to security.

Qualifications :

Required:

• A minimum of a bachelor's degree or equivalent experience is required.
• Deep knowledge of enterprise security solutions (Microsoft, Sentinel One, CrowdStrike, Trend Micro, etc).
• A minimum of 6 years of related hands-on experience with programming/scripting is required
• Experience with scripting languages (e.g., Python, Node, PowerShell) and API integrations.
• Have strong systematic problem-solving experience, a sense of accountability, ownership, and drive.
• Experience with DLP and employee activity monitoring tools like Teramind
• Experience with SIEM solutions (MS Sentinel, Splunk, etc)
• Experience in partnering with stakeholders to identify and address project issues.
• Good knowledge of concepts related to endpoint security tools.
• Communicative and interpersonal skills, be a team player that contributes to an energetic work environment at various levels of the organization.
• Continuous learning mindset of the latest technology trends and instituting innovative thinking/mindset throughout the organization.
• Good knowledge of PowerBi or Tableau.
• Experience effectively working with virtual, global teams – including diverse groups of people with varied backgrounds and cultural experiences.
• Fluent level of English is required

Preferred:

• Experience with Windows, Linux, and virtualization technologies.
• Experience with Bitbucket and Jira.
• Incident, Problem, and Change Request experienced.
• Demonstrated ability to work independently in a fast-paced environment.