Sr. Manager, Security Architecture & Innovation - R&D

Johnson & Johnson Innovative Medicine•Spring House, PA

13d•$122,000 - $211,025•Onsite

About The Position

Johnson & Johnson is recruiting a Sr. Manager, Security Architecture & Innovation – R&D, located in Spring House, Pennsylvania, or Raritan, New Jersey. The role is part of Information Security & Risk Management (ISRM) and serves as lead cybersecurity architect for Innovative Medicine R&D Discovery. The architect shapes secure operations across laboratories, operational technology (OT), clinical supply chain, and pilot-plant environments, translating scientific needs into practical, scalable security solutions. The role modernizes laboratory and OT security architecture and supports instrument onboarding, secure data exchange, laboratory automation, and attributable access. From early discovery through production, the role applies Zero Trust principles while protecting scientific agility, availability, safety, validated state, data integrity, and regulatory compliance. It develops and governs security architectures, guides implementation and operational readiness, aligns cross-functional teams, and measures the impact of architecture adoption and risk reduction.

Requirements

Bachelor’s degree or equivalent experience in technology, cybersecurity, engineering, computer science, or a related field.
At least seven years of multifaceted cybersecurity or technology experience, including security or solution architecture responsibilities.
Proven success crafting security solutions in R&D laboratory and OT environments.
Detailed experience generating, maintaining, and reviewing reference architectures, standards, decision records, threat models, and implementation guardrails.
Ability to lead architecture from an ambiguous business need through requirements, design, implementation, production transition, and lifecycle improvement.
Solid understanding of Zero Trust, identity and privileged access, segmentation, endpoint and asset security, secure connectivity, cloud integration, data transfer, monitoring, and incident-response integration.
Experience in a highly regulated industry, with exposure to robotics, industrial automation, or other safety-critical environments.
Hands-on familiarity with laboratory systems, scientific instrumentation, robotics, industrial control systems, or process automation.
Working knowledge of GxP, IEC 62443, ISA-95, and relevant NIST guidance.
Strong facilitation and interpersonal skills, with the ability to align scientists, engineers, business partners, and senior leaders around practical decisions.

Nice To Haves

Relevant certifications are valued, including CISSP-ISSAP, SABSA Chartered Security Architect, TOGAF, AWS Certified Solutions Architect – Professional, Microsoft Certified: Azure Solutions Architect Expert, Google Cloud Professional Cloud Architect, CCSP, GDSA, GICSP, ISA/IEC 62443 Cybersecurity Expert, or ISA/IEC 62443 Cybersecurity Risk Assessment Specialist.
Preferred skills include Change Management, Consulting, Cross-Functional Collaboration, Developing Others, Emerging Technologies, Enterprise IT Governance, Execution Focus, Inclusive Leadership, Information Security Management System (ISMS), Information Technology Strategies, IT Architecture, Leadership, Product Configuration, Product Lifecycle Management (PLM), Requirements Analysis, Solution Architecture, Team Management, and Technical Credibility.

Responsibilities

Compose end-to-end security solution architectures by partnering with scientists and technology teams to translate R&D and laboratory workflows into requirements, architecture options, proofs of value, and production-ready designs.
Develop, maintain, and review current-state, interim, and target-state reference architectures, standards, decision records, threat models, control mappings, and implementation patterns.
Modernize R&D laboratory and OT security through risk-tiered asset onboarding, secure instrument connectivity, controlled data exchange, laboratory automation, and secure remote and third-party access.
Apply practical Zero Trust controls, including identity-, asset-, application-, data-, session-, and purpose-aware controls, least privilege, continuous verification, and micro-segmentation, including for legacy and non-agentable equipment.
Set the modernization roadmap by strengthening security patterns, assessing enterprise capabilities and emerging technologies, testing interoperability and failure modes, and recommending vendor-neutral solutions based on risk, value, scalability, cost, and operability.
Lead architecture reviews as a trusted design authority, maintain traceability from requirements to controls, govern exceptions, and resolve material security, risk, and operational gaps before implementation.
Define sustainable operational requirements, including ownership, support, monitoring, incident response, lifecycle management, validation, recovery, supplier responsibilities, service levels, and production-readiness criteria.
Align R&D, engineering, Quality, operations, product teams, sites, and service providers across network, OT, identity, endpoint, data, and laboratory initiatives.
Establish baselines and communicate architecture adoption, risk reduction, delivery flow, operational health, customer experience, and continual-improvement progress.

Benefits

Medical, dental, and vision insurance.
Life insurance, short- and long-term disability, and business accident insurance.
Group legal insurance.
Company consolidated retirement plan (pension) and savings plan (401(k)), subject to plan terms.
Vacation: 120 hours per calendar year, subject to policy and date of hire.
Sick time: 40 hours per calendar year; 56 hours per calendar year for employees residing in Washington.
Holiday pay, including floating holidays: 13 days per calendar year.
Work, Personal and Family Time: up to 40 hours per calendar year.
Parental Leave: 480 hours within one year of the birth, adoption, or foster care of a child.
Condolence Leave: 30 days for an immediate family member and 5 days for an extended family member.
Caregiver Leave: 10 days.
Volunteer Leave: 4 days.
Military Spouse Time-Off: 80 hours.