Sr Manager IMSC Security & Compliance

Johnson & Johnson Innovative Medicine•Hopewell Township, NJ

20h

About The Position

We are seeking a highly skilled and proactive IMSC Security & Compliance to lead security and compliance governance across the IMSC data ecosystem. This role ensures timely implementation of security and compliance policies, continuous adherence to regulatory and internal standards, and robust oversight of data access controls. Beyond operational responsibilities, this position plays a strategic role in shaping the security and compliance vision within the broader IMSC Data Governance strategy. The ideal candidate will combine deep expertise in data security and compliance with strong leadership and stakeholder engagement skills to drive governance maturity across a federated operating model.

Requirements

Master’s degree in Information Security, Computer Science, Information Management, or related field.
5+ years of experience in data security, compliance, or governance roles, with at least 3 years in a leadership capacity.
Strong understanding of data protection regulations (e.g., GDPR, HIPAA) and industry security standards.
Hands-on experience with security frameworks, access control models, and compliance monitoring tools.
Excellent stakeholder management and communication skills.
Experience leading cross-functional teams and driving governance initiatives.
Fluent in English.

Nice To Haves

Strategic thinking and problem-solving.
Hands-on experience implementing data systems.
Ability to translate regulatory requirements into actionable governance frameworks.
Data-driven decision making.
Knowledge of pharmaceutical industry.
Familiarity with GxP, GDPR, DAMA or similar frameworks.
Experience in large corporate or matrixed environments.

Responsibilities

Implement and maintain security and compliance frameworks across IMSC data systems, ensuring alignment with corporate and regulatory requirements.
Monitor and enforce policy adherence, including internal controls, audit standards, and regulatory obligations (e.g., GDPR, GxP).
Oversee data access governance, ensuring appropriate controls, approvals, and segregation of duties for sensitive data.
Act as spokesperson in audits and conduct risk assessments, identify gaps and driving remediation plans.
Collaborate with IT and Security, Privacy, and Compliance teams to ensure consistency with enterprise standards and best practices.
Integrate security and compliance needs into the IMSC Data Governance roadmap and strategic initiatives.
Advise leadership on emerging risks, regulatory changes, and security trends impacting data governance.
Lead change management and adoption programs for security and compliance practices across mixed teams of J&J employees and external partners.
Communicate effectively across all levels of the organization, providing clear reporting on compliance metrics and exceptions.
Drive continuous improvement initiatives to strengthen security posture and compliance maturity across the data ecosystem.