Data Security Manager - Information Security & Risk Management
Johnson & Johnson
September 03, 2026
Remote friendly (Raritan, NJ)
United States
IT
Data Security Manager - Information Security & Risk Management (ISRM)
Location: Raritan, NJ (J&J office) or remote in the U.S., with periodic travel to Raritan, NJ.
Key Responsibilities:
- Lead the enterprise Data Protection Program (governance, operating processes, service oversight, metrics, reporting, continuous improvement).
- Own Data Protection exception management (USB, webmail, file-sharing, Trusted Computing, Secure Data Transfer, and other approved service exceptions).
- Assess exception requests; coordinate risk reviews, approvals, remediation actions, and lifecycle management.
- Reduce exception volume via secure alternatives, enhanced controls, user education, process optimization, and automation.
- Partner with EUS, ISRM, Compliance, Privacy, Legal, HR, and business partners to design and implement risk-based data protection controls.
- Define/monitor/report performance metrics, exception trends, risk themes, and executive insights.
- Maintain data protection policies, standards, procedures, governance documentation, and accountability frameworks.
- Develop/implement data security strategies to safeguard critical information assets and support enterprise data governance.
- Lead efforts to identify, classify, inventory, and protect critical information assets.
- Assess data security controls/processes/capabilities to identify gaps, risks, and improvements.
- Provide domain authority on emerging data security threats/technologies and recommend proactive risk mitigation.
- Lead security awareness, communications, change control, and training.
- Support implementation of new data security capabilities; collaborate across teams.
Qualifications:
- Education: BA/BS required; graduate degree or equivalent experience preferred.
- 6+ years in IT Security management and/or IT (preferred).
- 2+ years in data security (governance, data security measures, labeling, etc.).
- Experience assessing security threats, mitigation measures, and security vendors/technologies (required).
- Proven partnership/relationship-building with IT and business partners (required).
- Results orientation; communication/collaboration to network and influence globally (required).
Preferred:
- Certifications: CISM, CISSP, CISA, CRISC, or Data Security-related.
- Experience supporting a large-scale Data Security program.
- Experience performing Data Security and/or Data Protection projects.
Location: Raritan, NJ (J&J office) or remote in the U.S., with periodic travel to Raritan, NJ.
Key Responsibilities:
- Lead the enterprise Data Protection Program (governance, operating processes, service oversight, metrics, reporting, continuous improvement).
- Own Data Protection exception management (USB, webmail, file-sharing, Trusted Computing, Secure Data Transfer, and other approved service exceptions).
- Assess exception requests; coordinate risk reviews, approvals, remediation actions, and lifecycle management.
- Reduce exception volume via secure alternatives, enhanced controls, user education, process optimization, and automation.
- Partner with EUS, ISRM, Compliance, Privacy, Legal, HR, and business partners to design and implement risk-based data protection controls.
- Define/monitor/report performance metrics, exception trends, risk themes, and executive insights.
- Maintain data protection policies, standards, procedures, governance documentation, and accountability frameworks.
- Develop/implement data security strategies to safeguard critical information assets and support enterprise data governance.
- Lead efforts to identify, classify, inventory, and protect critical information assets.
- Assess data security controls/processes/capabilities to identify gaps, risks, and improvements.
- Provide domain authority on emerging data security threats/technologies and recommend proactive risk mitigation.
- Lead security awareness, communications, change control, and training.
- Support implementation of new data security capabilities; collaborate across teams.
Qualifications:
- Education: BA/BS required; graduate degree or equivalent experience preferred.
- 6+ years in IT Security management and/or IT (preferred).
- 2+ years in data security (governance, data security measures, labeling, etc.).
- Experience assessing security threats, mitigation measures, and security vendors/technologies (required).
- Proven partnership/relationship-building with IT and business partners (required).
- Results orientation; communication/collaboration to network and influence globally (required).
Preferred:
- Certifications: CISM, CISSP, CISA, CRISC, or Data Security-related.
- Experience supporting a large-scale Data Security program.
- Experience performing Data Security and/or Data Protection projects.