Sr. Manager, Zero Trust & Architecture

Johnson & Johnson•New Brunswick, NJ

1d•Hybrid

About The Position

DePuy Synthes is recruiting a senior cybersecurity leader to own the design and execution of its enterprise Zero Trust and cyber resiliency strategy. The role drives security across operational technology, networks, endpoints, cloud, and AI, data, and application environments, ensuring users, devices, workloads, and datasets are continuously verified and protected. It supports the protection of sensitive healthcare and MedTech data, secure digital transformation, and durable, recoverable operations for the standalone company. The role defines the enterprise Zero Trust strategy, reference architecture, roadmap, and investment priorities, and embeds Zero Trust controls across technology and business environments. It leads security for AI, data, applications, operational technology and manufacturing; oversees network segmentation, endpoint and device security, multi-cloud security, and enterprise email security; and advances cyber and operational resilience through architecture, continuity and recovery programs, testing, incident readiness, and executive metrics. The Sr. Manager builds and leads a global cybersecurity team and partners with executives and cross-functional leaders to evolve security priorities and controls. The position is based at one of the listed locations: Raritan, New Jersey; Palm Beach Gardens, Florida; Warsaw, Indiana; West Chester, Pennsylvania; Raynham, Massachusetts; or New Brunswick, New Jersey. Travel of up to 15% domestically and internationally is expected. The planned separation of Johnson & Johnson's Orthopaedics business is anticipated to be completed within 18 to 24 months, subject to applicable requirements and approvals; following the transaction, the employee is anticipated to join DePuy Synthes.

Requirements

Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.
15 or more years of cybersecurity leadership experience, with deep expertise across multiple domains such as OT security, network security, endpoint protection, cloud security, and application/data security.
Proven experience defining and executing Zero Trust strategy and architecture in complex, global enterprise environments.
Strong background in vulnerability and exposure management, including risk-based prioritization and remediation at scale.
Hands-on knowledge of network segmentation, micro-segmentation, SASE, and ZTNA.
Experience securing multi-cloud environments (AWS, Azure, GCP) and hybrid environments, including CSPM/CNAPP tooling.
Demonstrated experience leading cyber resiliency, BCP/DR, and incident recovery programs.
Strong leadership, stakeholder management, and cross-functional collaboration skills, including managing global teams.
English proficiency.
Ability to travel up to 15% domestically and internationally.

Nice To Haves

Advanced degree, such as a Master's degree or MBA.
Expertise in AI/ML security, data protection, and modern application security, including API security and secure SDLC.
Experience in healthcare, MedTech, pharmaceuticals, or other highly regulated industries.
Familiarity with security and resilience frameworks such as NIST CSF, NIST 800-207 Zero Trust, ISO 27001, ISO 22301, CIS, and MITRE ATT&CK.
Experience leading security through large-scale transformations, divestitures, or standalone company build-outs.
Strong understanding of auditing, monitoring, and compliance across security and resilience controls.
Certifications such as GDSA, CISSP, CISM, CCSP, CCSK, or equivalent.

Responsibilities

Define and lead the enterprise-wide Zero Trust strategy, reference architecture, roadmap, and investment priorities aligned with business, cybersecurity, and regulatory objectives.
Embed Zero Trust principles and controls across operational technology, networks, endpoints, cloud, applications, data, identity, and hardware platforms.
Lead security for AI, data, and application environments, including secure SDLC, code and API security, model integrity, data protection, and secure AI/ML and GenAI adoption.
Own security strategy for operational technology and manufacturing environments while supporting production continuity and regulatory compliance.
Define and execute enterprise network segmentation and micro-segmentation across corporate, manufacturing, R&D, and cloud environments.
Lead endpoint and device security across managed, unmanaged, mobile, and specialty devices using EDR/XDR, device posture, and conditional access capabilities.
Own multi-cloud security across AWS, Azure, and GCP, including secure landing zones, workload protection, CSPM/CNAPP, guardrails, and automated policy enforcement.
Lead enterprise email security and strengthen protection against phishing, business email compromise, account takeover, malware, and data exfiltration.
Drive cyber and operational resilience through resilient architecture, business continuity and disaster recovery, recovery testing, incident readiness, and executive metrics.
Build and lead a high-performing global cybersecurity team and partner with executives and cross-functional leaders to evolve security priorities and controls.

Benefits

Participation in the consolidated retirement plan (pension), subject to plan terms.
Participation in the savings plan (401(k)), subject to plan terms.
Vacation: 120 hours per calendar year, subject to policy and hire date.
Sick time: 40 hours per calendar year, with different amounts for employees residing in Colorado or Washington.
Holiday pay, including floating holidays: 13 days per calendar year.
Work, Personal and Family Time: up to 40 hours per calendar year.
Parental leave: 480 hours within one year of the birth, adoption, or foster care of a child.
Bereavement leave: 240 hours for an immediate family member and 40 hours for an extended family member per calendar year.
Caregiver leave: 80 hours in a 52-week rolling period.
Volunteer leave: 32 hours per calendar year.
Military spouse time-off: 80 hours per calendar year.