Job Description Johnson & Johnson is recruiting for a Director, Emerging Security Technology to be located preferably in Raritan, NJ (Tri-State area) or California Bay Area.
Will consider other JNJ sites in the US.
Role Summary: The Director is a forward-thinking, hardworking Security & Technology executive in a position that requires an outstanding blend of technology expertise, security and risk insight and intuition for business.
S/he will provide technical and security leadership to identify emerging and innovative security technologies that transform and accelerate traditional approach to risk reduction; will work across teams to incubate potential innovative solutions to emerging security risk areas and prototype through proof of concept to resolve business and security risks.
Upon success and investment prioritization the successful candidate work with security and technology engineering teams to integrate a broad range of security technologies.
The Director will be accountable for gathering input from key partners and participate in a community of practice with responsibility for maintaining an up-to-date holistic technical architecture.
In addition is accountable for ensuring detailed short and medium-term roadmaps through knowledge of current and emerging technology solution capabilities as well as in-depth knowledge of key solution roadmaps to build a living roadmap updated quarterly that prioritizes remediation of risk gaps across the enterprise.
You will: Explore emerging security technology and stays-up-to-date on the latest industry and security innovation trends Applies emerging technology to client or business needs Provide insights on emerging and specialized security technologies through multiple resources, which may include publications, and/or relationships with incubators, accelerators, startups, and universities.
Performs technical due diligence and consultation related to new security platforms, tools, start-ups, and other potential partnerships in the innovation ecosystem Cultivates an internal network that grows strategy and architecture team’s influence Builds business case through collaboration across the organization for new proof-of-concepts (PoCs) and solutions Demonstrates thought leadership and represents JNJ in technical forums and seminars Identifies innovation opportunities through relationships with both internal and external ecosystem partners Develops scope for prototypes, pilots and proof-of-concepts and is responsible for their development Is recognized as an innovation leader with vision on existing and emerging security trends Works with vendors and technology providers to understand and shape future product roadmaps and feature improvement priorities to best meet JNJ security technology and ultimately address risk needs, Maintains industry connection across peer groups and research teams to continuously understand new and emerging security technologies and solutions that maybe ground-breaking and significant velocity enablers for addressing and mitigating the threat / risk landscape at JNJ, Direct and lead the Information and Security Risk Management (ISRM) specialists in supporting internal ISRM technology teams, identifying project investment priorities and will help support if needed internal control audits Seen as a technology specialist and leader of ISRM technical domain professionals and have direct interaction with JJT management and senior leadership.
Serves as a mentor and technical specialist to ISRM peers as well as junior members of internal staff.
Provides technical expertise to risk management activities for meeting regulatory, security and business requirements Anticipates risks and issues of high technical complexity based on understanding of business trends and the goals and objectives Proactively assesses the impact of regulatory and other security and internal control changes on IT processes and guides senior management on the implications of costs, performance issues, risks and business needs Shares authoritative knowledge of future trends, tools, procedures and systems in security, internal controls and risk management Reviews or prepares reports on risk management to be communicated to key stakeholders in highly sophisticated situations Participates in forums, benchmarking analyses, and processes that result in improvement, information sharing and innovation across J&J Qualifications Required: Bachelor’s degree, or minimum university degree equivalent.
MS and/or advanced degree preferred.
Minimum of 12 years of related Information Risk Management Experience Deep experience and technical expertise in Information Security, Risk Management, and/or SOX Compliance, especially related to IT internal controls.
Broad experience on audits, including audit preparation, support and remediation Detailed experience with tools and applications leading Governance, Risk and Compliance Effectively works with virtual, global teams – including diverse groups of people with multifaceted backgrounds and cultural experiences Efficiently fills in for a senior-level vacancy Customer focused Superb interpersonal skills, ability to network, interface and influence at all levels of the organization, cross sector, cross-functionally, and globally.
Preferred: Information Security & Risk Management certifications Working knowledge of COBIT and / or ITIL GxP background Johnson & Johnson is an Affirmative Action and Equal Opportunity Employer.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.