IM Cyber Security Director – Patient Experience and Customer Solutions

Johnson & Johnson Innovative Medicine•Hopewell Township, NJ

1d•$164,000 - $282,900•Hybrid

About The Position

J&J ISRM is seeking an IM Cyber Security Director – Patient Experience and Customer Solutions (PECS) to serve as the senior Information Security & Risk Management (ISRM) leader supporting PECS. This role will define and operationalize a forward-looking, risk-based security strategy that enables PECS growth and innovation while protecting patient health information, personal data, and other sensitive information across patient support programs, digital capabilities, data platforms, and third-party ecosystems. The Director will act as a trusted cyber security advisor to PECS business and technology leaders and will partner closely with Legal, Privacy, Compliance, Digital Product and Solution teams, Cyber Defense, and other enterprise functions. The role will translate business strategy, evolving threats, patient expectations, and applicable legal and regulatory requirements into practical security priorities and enabling solutions. Based in Titusville, NJ this role will collaborate with Johnson & Johnson IM Business and Business Technology partners.

Requirements

Bachelor's degree in cybersecurity, computer science, information technology, risk management, or a related field; an advanced degree such as an MBA, JD, or relevant master's degree is preferred.
Ten or more years of progressive experience in cybersecurity, information security, technology risk, data protection, healthcare technology, or related disciplines, including leadership in a complex enterprise environment.
Demonstrated experience advising senior leaders and directing cybersecurity strategy, risk governance, and security assurance for business-critical or regulated capabilities.
Strong knowledge of security architecture, cloud and application security, identity and access management, data protection, security monitoring, vulnerability management, incident response, resilience, third-party risk, and data retention and deletion practices.
Experience protecting health information, patient data, personal data, or similarly sensitive regulated information across complex data flows and external partner ecosystems.
Working expertise with the HIPAA Security Rule and related healthcare security expectations; familiarity with relevant state and federal privacy requirements and broader security or privacy-aligned control frameworks is strongly preferred.
Proven ability to translate complex requirements into practical strategies, controls, services, and business decisions that support user-centered solutions.
Proven ability to lead cross-functional initiatives, influence without direct authority, overcome resistance, and drive risk decisions and remediation to measurable outcomes.
Experience building, leading, and developing high-performing teams, including globally distributed and matrixed resources.
Excellent executive communication, stakeholder management, negotiation, collaboration, and decision-making skills.
Demonstrated agility, resourcefulness, accountability, and persistence in a complex and rapidly changing environment.

Nice To Haves

Relevant professional certifications such as CISSP, CISM, CRISC, CCSP, or equivalent are preferred.
Cybersecurity leadership supporting patient services, patient support programs, digital health, commercial operations, customer engagement, access and affordability services, or related healthcare technology ecosystems.
Experience securing cloud platforms, data and analytics environments, APIs and integrations, software-as-a-service solutions, and emerging technologies.
Experience working with regulators, auditors, Legal, Privacy, Compliance, and third parties in a global healthcare or life sciences environment.
Demonstrated success establishing risk metrics, improving control maturity, reducing material exposure, and enabling secure business transformation.

Responsibilities

Own the ISRM partnership with PECS, serving as the accountable cybersecurity leader and trusted advisor to senior business, technology, product, data, Legal, Privacy, Compliance, and operational stakeholders.
Define and execute a multi-year, risk-based security and patient data protection strategy aligned with PECS growth priorities, patient support models, enterprise ISRM strategy, risk appetite, and applicable legal and regulatory requirements, including the HIPAA Security Rule.
Embed security-by-design across the PECS capability lifecycle and translate cybersecurity and data protection requirements into practical solutions that enable innovation while protecting patient trust and sensitive information.
Lead risk-based security reviews and guide the implementation and remediation of controls across patient support programs, applications, cloud services, data platforms, integrations, analytics, artificial intelligence use cases, and digital patient and provider experiences.
Establish effective cybersecurity governance across PECS, including decision rights, risk acceptance and escalation, control ownership, issue management, incident readiness and response, third-party oversight, and integration with enterprise ISRM processes.
Develop executive-ready risk insights and metrics, communicate material risks and remediation progress, and influence business planning and investment so cybersecurity capabilities scale appropriately with PECS.
Lead, coach, and develop a high-performing team; set clear priorities and performance expectations, provide ongoing feedback and development opportunities, support succession planning, and foster an inclusive, purpose-driven culture aligned with Our Credo and J&J leadership expectations.

Benefits

medical
dental
vision
life insurance
short- and long-term disability
business accident insurance
group legal insurance
consolidated retirement plan (pension)
savings plan (401(k))
long-term incentive program
Vacation –120 hours per calendar year
Sick time - 40 hours per calendar year (or 56 hours for Washington State residents)
Holiday pay, including Floating Holidays –13 days per calendar year
Work, Personal and Family Time - up to 40 hours per calendar year
Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
Condolence Leave – 30 days for an immediate family member: 5 days for an extended family member
Caregiver Leave – 10 days
Volunteer Leave – 4 days
Military Spouse Time-Off – 80 hours