Senior Director HCC Risk Mgmt Strategy & Enablement (USA/Orthopaedics)

Johnson & Johnson Innovative Medicine•West Palm Beach, FL

23h•Hybrid

About The Position

This role provides global leadership for the Health Care Compliance (HCC) program’s risk management strategy and operating model, driving enablement, execution excellence, and enterprise governance and controls. The leader partners closely with the Chief Compliance Officer (CCO), the HCC Leadership Team, and adjacent risk and enablement functions to simplify and standardize program execution, modernize technology and analytics capabilities, and ensure timely, accurate reporting and escalation to senior leadership and the Board. The position will develop regular updates for the CEO, Executive Committee, and Board of Directors, and support the CCO with disclosure requirements and external representation. Additionally, this role will help set HCC long-term strategy and annual priorities, shape leadership team meeting agendas, and establish a cadence of reviews to oversee and communicate program effectiveness. This position leads the ongoing evolution of HCC’s risk management program, including Third-Party Risk Management, with an emphasis on stronger governance and controls, improved data quality and insights, and scalable technology solutions that support the HCCOs and enables proactive monitoring and remediation of key compliance risks globally. It is anticipated that upon completion of the planned separation of the Orthopaedics business, this role would transition to employment with DePuy Synthes, the standalone Orthopaedics company.

Requirements

Bachelor’s degree (or international equivalent) required; advanced degree (e.g., MBA, JD) preferred; law, accounting, finance, health science, or business-related study desirable.
12+ years of progressive experience in healthcare/pharmaceutical/medical device compliance, risk management, auditing/monitoring, regulatory, finance, or related field (15+ years preferred for breadth of enterprise leadership).
Deep knowledge of applicable healthcare compliance laws and standards, including fraud and abuse laws, FDA promotional practices, anti-bribery/anti-corruption (e.g., FCPA), industry codes, state requirements, and relevant company policies.
Demonstrated ability to set strategy and lead complex global programs; strong program and project portfolio management skills with a track record of measurable outcomes.
Experience leading and developing diverse global teams and managing budgets; strong stakeholder management, negotiation, and influencing skills across all organizational levels.
Strong change management capability and comfort operating through ambiguity and complexity.
Strong data, analytics, and technology orientation, including the ability to define requirements, interpret insights, and drive digital transformation.
Experience with third-party risk management programs and lifecycle risk management (including due diligence).
Excellent written and verbal communication skills, including experience preparing and presenting materials for senior leaders and Board-level audiences.

Nice To Haves

compliance and/or project management certifications preferred.

Responsibilities

Set and execute the global HCC program strategy and annual priorities; drive consistent execution of the compliance program
Design, implement, and continuously improve global policies, procedures, training, and communications to promote compliant growth and an effective speak-up culture.
Own the enterprise risk assessment and risk review operating model: drive consistent methodologies, documentation, and escalation to enable a consolidated view of risk.
Define and oversee KPIs for measuring program effectiveness and operational excellence; provide regular updates to executive leadership and the Board, as applicable.
Oversee HCC operational capabilities, including technology solutions, data quality and data management, transparency reporting, risk assessment & mitigation, and documentation/policy management tools and processes.
Continuous evolution of third-party risk management (e.g., due diligence and lifecycle risk management) and build analytics and monitoring capabilities to detect emerging risks and control gaps.

Benefits

Consolidated retirement plan (pension)
Savings plan (401(k))
Long-term incentive program
Vacation –120 hours per calendar year
Sick time - 40 hours per calendar year (varies by state)
Holiday pay, including Floating Holidays –13 days per calendar year
Work, Personal and Family Time - up to 40 hours per calendar year
Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year
Caregiver Leave – 80 hours in a 52-week rolling period
Volunteer Leave – 32 hours per calendar year
Military Spouse Time-Off – 80 hours per calendar year