Cybersecurity Manager Vision Commercial
Johnson & Johnson
June 24, 2026
Remote friendly (Jacksonville, FL)
United States
IT
Cybersecurity Manager (Vision Commercial)
Responsibilities:
- Partner with project teams to deliver required security capabilities/services for innovative technology solutions; support end-to-end large programs.
- Provide tailored security guidance by risk/complexity; interpret and apply Asset Protection Policy (IAPP) requirements.
- Drive cybersecurity adoption across Vision Commercial functions (sales, market access, digital marketing, e-commerce, commercial operations) to secure go-to-market processes and enterprise commercial platforms.
- Lead adoption of cybersecurity best practices to protect patient/customer/business data across commercial workflows and digital engagement capabilities.
- Lead the cyber operational portfolio: identify issues, define remediation plans, and drive completion with ISRM/business/technology teams.
- Establish security posture analytics across business units/functions/sites.
- Support Cyber Defense Center (CDC) incident investigations and liaise with central investigation teams.
- Ensure solutions meet cybersecurity/privacy/data protection requirements and compliance standards (e.g., NIST, ISO27001, NIS2, HDS, PGSSI-S, SOX).
- Support global security initiative deployment (awareness, alternative ways of working, exception review).
- Drive security gap assessments and remediation for Vision Commercial capabilities, including new market/platform/business integrations.
Qualifications:
- Bachelor’s degree in cybersecurity/CS/IT/business administration or related discipline (Master’s strongly preferred).
- 5+ years IT/engineering with security focus; hands-on implementation of core security technologies/controls (access control, IDP/IDR, anti-malware, patch management, encryption, forensics, etc.).
- Knowledge of enterprise/digital business security (identity, endpoint, network, cloud, enterprise commercial platform security).
- Experience supporting MedTech commercial functions; preferred experience supporting Vision commercial teams.
- Experience performing security assessments and security assurance across enterprise architecture layers.
- Understanding of security threats/mitigation and security vendors/technologies.
- Cloud security experience (AWS, Azure).
- Security standards experience (ISO27001, HiTrust, NIST, etc.); CISM/CISSP/CISA/CRISC preferred.
- English fluency required.
Preferred skills:
Business process design, crisis management, critical thinking, inclusive leadership, information security auditing/ISMS, IT security assessments/strategies, leadership, people performance management, presentation design, process optimization, resource planning, security architecture/policies, tactical planning, vulnerability management.
Benefits:
Annual bonus (set target based on pay grade/location) and/or sales commissions; vacation days; parental leave (minimum 12 weeks); bereavement/caregiver/volunteer leave; well-being reimbursement; programs for financial/physical/mental health; service anniversary/recognition awards; eligibility for insurance plans (and sometimes dependents).
Responsibilities:
- Partner with project teams to deliver required security capabilities/services for innovative technology solutions; support end-to-end large programs.
- Provide tailored security guidance by risk/complexity; interpret and apply Asset Protection Policy (IAPP) requirements.
- Drive cybersecurity adoption across Vision Commercial functions (sales, market access, digital marketing, e-commerce, commercial operations) to secure go-to-market processes and enterprise commercial platforms.
- Lead adoption of cybersecurity best practices to protect patient/customer/business data across commercial workflows and digital engagement capabilities.
- Lead the cyber operational portfolio: identify issues, define remediation plans, and drive completion with ISRM/business/technology teams.
- Establish security posture analytics across business units/functions/sites.
- Support Cyber Defense Center (CDC) incident investigations and liaise with central investigation teams.
- Ensure solutions meet cybersecurity/privacy/data protection requirements and compliance standards (e.g., NIST, ISO27001, NIS2, HDS, PGSSI-S, SOX).
- Support global security initiative deployment (awareness, alternative ways of working, exception review).
- Drive security gap assessments and remediation for Vision Commercial capabilities, including new market/platform/business integrations.
Qualifications:
- Bachelor’s degree in cybersecurity/CS/IT/business administration or related discipline (Master’s strongly preferred).
- 5+ years IT/engineering with security focus; hands-on implementation of core security technologies/controls (access control, IDP/IDR, anti-malware, patch management, encryption, forensics, etc.).
- Knowledge of enterprise/digital business security (identity, endpoint, network, cloud, enterprise commercial platform security).
- Experience supporting MedTech commercial functions; preferred experience supporting Vision commercial teams.
- Experience performing security assessments and security assurance across enterprise architecture layers.
- Understanding of security threats/mitigation and security vendors/technologies.
- Cloud security experience (AWS, Azure).
- Security standards experience (ISO27001, HiTrust, NIST, etc.); CISM/CISSP/CISA/CRISC preferred.
- English fluency required.
Preferred skills:
Business process design, crisis management, critical thinking, inclusive leadership, information security auditing/ISMS, IT security assessments/strategies, leadership, people performance management, presentation design, process optimization, resource planning, security architecture/policies, tactical planning, vulnerability management.
Benefits:
Annual bonus (set target based on pay grade/location) and/or sales commissions; vacation days; parental leave (minimum 12 weeks); bereavement/caregiver/volunteer leave; well-being reimbursement; programs for financial/physical/mental health; service anniversary/recognition awards; eligibility for insurance plans (and sometimes dependents).