Sr. Manager, Security Architecture & Innovation - R&D

6090-Johnson & Johnson Services Legal Entity•Spring House, PA

12d

About The Position

Johnson & Johnson is recruiting a Sr. Manager, Security Architecture & Innovation – R&D, based in Spring House, Pennsylvania, or Raritan, New Jersey. The role leads cybersecurity architecture for Innovative Medicine R&D Discovery within Information Security & Risk Management (ISRM). It shapes secure operations across laboratories, operational technology (OT), clinical supply chain, and pilot-plant environments, translating scientific needs into practical, scalable solutions. The position modernizes laboratory and OT security and supports instrument onboarding, secure data exchange, laboratory automation, and attributable access. From early discovery through production, the role applies Zero Trust principles while protecting scientific agility, availability, safety, validated state, data integrity, and regulatory compliance. It serves as a design authority across architecture, implementation, and sustainable operations, aligning R&D, engineering, Quality, operations, product teams, sites, and service providers. Success includes approved architectures and documented exceptions before build or production release; wider adoption of least-privilege controls and approved patterns; reduced standing access, unmanaged connectivity, and high-risk exceptions; production releases meeting security and operational criteria; and measurable progress on improvement actions and service-level objectives.

Requirements

Bachelor’s degree or equivalent experience in technology, cybersecurity, engineering, computer science, or a related field.
At least seven years of multifaceted cybersecurity or technology experience, including security or solution architecture responsibilities.
Proven success crafting security solutions in R&D laboratory and OT environments.
Detailed experience generating, maintaining, and reviewing reference architectures, standards, decision records, threat models, and implementation guardrails.
Ability to lead architecture from an ambiguous business need through requirements, design, implementation, production transition, and lifecycle improvement.
Solid understanding of Zero Trust, identity and privileged access, segmentation, endpoint and asset security, secure connectivity, cloud integration, data transfer, monitoring, and incident-response integration.
Experience in a highly regulated industry, with exposure to robotics, industrial automation, or other safety-critical environments.
Hands-on familiarity with laboratory systems, scientific instrumentation, robotics, industrial control systems, or process automation.
Working knowledge of GxP, IEC 62443, ISA-95, and relevant NIST guidance.
Strong facilitation and interpersonal skills, with the ability to align scientists, engineers, business partners, and senior leaders around practical decisions.

Nice To Haves

Relevant certifications are valued, including CISSP-ISSAP, SABSA Chartered Security Architect, TOGAF, AWS Certified Solutions Architect – Professional, Microsoft Certified: Azure Solutions Architect Expert, Google Cloud Professional Cloud Architect, CCSP, GDSA, GICSP, ISA/IEC 62443 Cybersecurity Expert, or ISA/IEC 62443 Cybersecurity Risk Assessment Specialist.
Preferred skills include Change Management, Consulting, Cross-Functional Collaboration, Developing Others, Emerging Technologies, Enterprise IT Governance, Execution Focus, Inclusive Leadership, Information Security Management System (ISMS), Information Technology Strategies, IT Architecture, Leadership, Product Configuration, Product Lifecycle Management (PLM), Requirements Analysis, Solution Architecture, Team Management, and Technical Credibility.

Responsibilities

Compose end-to-end security solution architectures and partner with scientists and technology teams to translate R&D and laboratory workflows into requirements, architecture options, proofs of value, and production-ready designs.
Develop, maintain, and review current-state, interim, and target-state architectures, standards, decision records, threat models, control mappings, and implementation patterns.
Modernize R&D laboratory and OT security through risk-tiered asset onboarding, secure instrument connectivity, controlled data exchange, laboratory automation, and secure remote and third-party access.
Apply practical Zero Trust controls, including identity-, asset-, application-, data-, session-, and purpose-aware controls, least privilege, continuous verification, and micro-segmentation, while accommodating legacy and non-agentable equipment.
Set the modernization roadmap by strengthening security patterns, assessing enterprise capabilities and emerging technologies, testing interoperability and failure modes, and recommending vendor-neutral solutions based on risk, value, scalability, cost, and operability.
Lead architecture reviews, maintain traceability from requirements to controls, govern exceptions, and resolve material security, risk, and operational gaps before implementation.
Define sustainable operational practices covering ownership, support, monitoring, incident response, lifecycle management, validation, recovery, supplier responsibilities, service levels, and production-readiness criteria.
Align R&D, engineering, Quality, operations, product teams, sites, and service providers across network, OT, identity, endpoint, data, and laboratory initiatives.
Establish baselines and communicate architecture adoption, risk reduction, delivery flow, operational health, customer experience, and continual-improvement progress.

Benefits

Medical, dental, and vision insurance.
Life insurance, short- and long-term disability, business accident insurance, and group legal insurance.
Consolidated retirement plan (pension) and 401(k) savings plan.
Vacation: 120 hours per calendar year.
Sick time: 40 hours per calendar year; 56 hours per calendar year for employees who reside in Washington State.
Holiday pay, including floating holidays: 13 days per calendar year.
Work, Personal and Family Time: up to 40 hours per calendar year.
Parental Leave: 480 hours within one year of the birth, adoption, or foster care of a child.
Condolence Leave: 30 days for an immediate family member and 5 days for an extended family member.
Caregiver Leave: 10 days.
Volunteer Leave: 4 days.
Military Spouse Time-Off: 80 hours.