Manager - Cyber Security

The Cyber Security Manager is primarily responsible for all ongoing activities related to the availability, integrity, and confidentiality of J&J protected information, providers, employees, and business information in compliance with the J&J’s security procedures, regulations, and laws.

Job Responsibilities:

• Performs security management per the organization's Information Security and/or Privacy policies and procedures.
  • Performs information security risk analysis and periodic information system activity reviews for information security processes.
  • Monitors internal control systems to ensure that appropriate information access levels and security clearances are maintained.
  • Provides security awareness to the organization by developing and implementing the education and awareness program.
  • Monitors compliance with the organization's security policies and procedures among employees, contractors, alliances and other third parties, and takes corrective action as needed.
  • Manages information security incident response actions.
• Coordinates the development of the organization’s disaster recovery and business continuity plans for information systems and periodically tests organizational readiness.
• Serves as an internal information security consultant to the organization.
• Monitors advancements in information security technologies to ensure organizational adaptation and compliance.
• Monitors changes in legislation and accreditation standards that affect information security.
• Initiates, facilitates, and promotes activities to foster information security awareness within the organization.
• Reviews all system-related information security plans throughout the organization's network and acts as a liaison to the Board of Directors, Senior Management, & Information Technology Department.
• Cooperates with J&J’s legal entities, and organization officers in any compliance reviews or investigations.
• To document all the security policies and to promote activities and procedures to create a general awareness about the significance of security within an organization.
• To review the security plans that have been implemented on the systems throughout the entire network of the organization.
• Mentor and manage Security employees and consultants.

· To initiate, develop, and maintain information security policies and procedures and to ensure that the security strategies are being followed, to meet the organizational security goals and standards.

· Maintain the Third-Party Service Provider management system by analyzing and controlling risks presented to Johnson & Johnson, the company’s data, & operations, that might be presented by Third-Party Service Providers (TPSP)

Education and Work Experience:

· Baccalaureate degree in Information Management or a related security information technology field

· Experience in project management and change management

Knowledge Skills & Abilities:

· Knowledge of network infrastructure

· Knowledge of database applications

· Good presentation and communication skills

· ISACA Certified Information Security Manager Certification

· CompTIA Security+ Certification

· CompTIA Secure Infrastructure Specialist Certification

Typical Physical Demands:

· Requires the ability to sit or stand for long periods of time, occasional stooping, and reaching; May require lifting-up to 50+ pounds; requires normal range of vision and hearing with or without accommodations.

· Must have a valid driver’s license

· Opportunity for travel to remote offices for support and special projects

· Scheduled weekend and after hours’ work as needed