Senior Manager, Cybersecurity Awareness & Training
Johnson & Johnson
August 14, 2026
Remote friendly (Spring House, PA)
United States
IT
Senior Manager, Cybersecurity Awareness & Training
Key Responsibilities:
- Execute global cybersecurity awareness, training, and engagement strategies aligned to business priorities, organizational risk, cyber threat trends, and regulatory requirements.
- Serve as Product/Service Owner for Human Risk Management products and services; define strategy, roadmap, priorities, adoption plans, and continuous improvements.
- Design and deliver enterprise-wide awareness campaigns, role-based learning journeys, leadership engagement programs, and targeted interventions for high-risk populations.
- Shape modern learning experiences using microlearning, gamification, AI-enabled education, and innovative approaches (behavioral science/industry best practices).
- Identify/evaluate/implement AI and automation capabilities to enhance awareness, training, communications, and engagement; promote secure and responsible AI use.
- Establish and monitor KPIs for security culture, behavior change, risk reduction, and program effectiveness; analyze phishing/training/engagement data for insights and reporting.
- Oversee awareness/training technologies, reporting platforms, vendor relationships, and external partners.
- Partner across Corporate Affairs, Learning & Development, Cyber Threat Intelligence, Business Information Security, and others to translate threats into timely education and engagement.
Qualifications:
Required:
- Bachelor’s degree.
- 8–10 years’ professional experience in related areas (cybersecurity awareness/training/human risk management, learning & development, organizational change, communications).
- Strong knowledge of cybersecurity/human-risk topics (social engineering/phishing, IAM, data protection, cloud security, insider risk, emerging technologies).
- Ability to lead complex, cross-functional initiatives.
- Strong executive communication skills.
- Proven stakeholder influence and alignment.
- Data/metrics experience to assess effectiveness and identify high-risk audiences.
Preferred:
- Phishing simulation/human risk management platforms and behavioral analytics.
- Digital product/service owner experience.
- SANS Security Awareness Professional (SSAP) or similar certification.
Location: Raritan, NJ (also possible at East Coast U.S. J&J office sites).
Key Responsibilities:
- Execute global cybersecurity awareness, training, and engagement strategies aligned to business priorities, organizational risk, cyber threat trends, and regulatory requirements.
- Serve as Product/Service Owner for Human Risk Management products and services; define strategy, roadmap, priorities, adoption plans, and continuous improvements.
- Design and deliver enterprise-wide awareness campaigns, role-based learning journeys, leadership engagement programs, and targeted interventions for high-risk populations.
- Shape modern learning experiences using microlearning, gamification, AI-enabled education, and innovative approaches (behavioral science/industry best practices).
- Identify/evaluate/implement AI and automation capabilities to enhance awareness, training, communications, and engagement; promote secure and responsible AI use.
- Establish and monitor KPIs for security culture, behavior change, risk reduction, and program effectiveness; analyze phishing/training/engagement data for insights and reporting.
- Oversee awareness/training technologies, reporting platforms, vendor relationships, and external partners.
- Partner across Corporate Affairs, Learning & Development, Cyber Threat Intelligence, Business Information Security, and others to translate threats into timely education and engagement.
Qualifications:
Required:
- Bachelor’s degree.
- 8–10 years’ professional experience in related areas (cybersecurity awareness/training/human risk management, learning & development, organizational change, communications).
- Strong knowledge of cybersecurity/human-risk topics (social engineering/phishing, IAM, data protection, cloud security, insider risk, emerging technologies).
- Ability to lead complex, cross-functional initiatives.
- Strong executive communication skills.
- Proven stakeholder influence and alignment.
- Data/metrics experience to assess effectiveness and identify high-risk audiences.
Preferred:
- Phishing simulation/human risk management platforms and behavioral analytics.
- Digital product/service owner experience.
- SANS Security Awareness Professional (SSAP) or similar certification.
Location: Raritan, NJ (also possible at East Coast U.S. J&J office sites).