At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com
As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.
Job Function:
Project/Program Management GroupJob Sub Function:
Technology Program/Portfolio ManagementJob Category:
ProfessionalAll Job Posting Locations:
New Brunswick, New Jersey, United States of America, Palm Beach Gardens, Florida, United States of America, Raynham, Massachusetts, United States of America, Warsaw, Indiana, United States of America, West Chester, Pennsylvania, United States of AmericaJob Description:
DePuy Synthes is recruiting for a(n) Sr. Program Manager, Cyber Strategy & PMO located in New Brunswick, NJ or Palm Beach Gardens, FL or Warsaw, IN or West Chester, PA or Raynham, MA.
The Sr. Program Manager, Cyber Strategy & PMO is a senior cybersecurity leadership role responsible for shaping and driving the strategic direction, governance, and operational discipline of DePuy Synthes' global cybersecurity function. This leader will own the cyber strategy and transformation agenda, portfolio and program governance, and the operating model that enables the cybersecurity organization to deliver at scale. The role plays a critical part in aligning cyber investments to enterprise priorities, ensuring transparent executive reporting, and building the PMO capabilities needed to safeguard patient trust, business continuity, and regulatory compliance. This position reports into the DePuy Synthes Technology organization.
Key Responsibilities
Support the development and lead execution of the enterprise Cyber Strategy & Transformation roadmap, translating business priorities and threat landscape shifts into a multi‑year plan for the cybersecurity function.
Own Portfolio & Program Governance across the cybersecurity organization, ensuring initiatives are prioritized, sequenced, and delivered against defined outcomes, budgets, and timelines.
Drive Executive Reporting & Governance by producing CIO, CISO-ready materials that clearly communicate cyber posture, program health, risks, and value delivered.
Direct Financial & Resource Management for the cybersecurity function, including annual budget planning, forecasting, variance analysis, vendor spend, and workforce/resource allocation.
Build and mature the cybersecurity Operating Model & PMO Excellence, establishing standards, playbooks, tools, and cadences that enable consistent, high‑quality delivery across teams and geographies.
Lead Stakeholder Alignment across IT, Legal, Privacy, Quality, Finance, HR, and Business leaders, ensuring cyber priorities are understood, funded, and embedded into enterprise decision‑making.
Partner with cybersecurity domain leaders (e.g., Incident Response & Threat, Identity, Product Security) to align strategy, roadmaps, and governance across the function.
Lead, mentor, and develop a high‑performing cyber strategy and PMO team, including program managers and analysts across US and India locations.
Drive continuous improvement of PMO tools, processes, KPIs, and reporting to increase transparency, efficiency, and the strategic impact of the cybersecurity organization.
Qualifications
Education:
Bachelor's degree in Computer Science, Information Security, Business, Engineering, or a related field (required).
Master's degree in Cybersecurity, Information Systems, or Business Administration (preferred).
Experience and Skills:
Required:
10-12 years of progressive experience in cybersecurity strategy, technology PMO, program/portfolio management, or IT risk management, including people leadership roles.
Proven experience building and running a cyber or technology PMO, including portfolio governance, executive reporting, and financial management.
Demonstrated ability to develop and communicate multi‑year strategy and transformation roadmaps for cybersecurity or broader technology functions.
Understanding of the cybersecurity domains, and how they connect to enterprise risk and business outcomes.
Experience working in regulated environments (e.g., healthcare, life sciences, MedTech, or similarly regulated industries).
Excellent executive communication, storytelling, and stakeholder management skills, with a track record of influencing senior leaders.
Preferred:
Experience supporting global organizations with complex technology environments and distributed delivery models (including GCC/offshore).
Familiarity with security and control frameworks such as NIST CSF, ISO 27001, or similar standards.
Experience leading cyber programs through large‑scale transformations (e.g., separations, M&A, ERP or cloud modernization).
Prior experience managing budgets of meaningful scale, including vendor and workforce spend.
Certifications such as PMP, PgMP, SAFe, CISM, CISSP, or equivalent.
Other:
Language: English (fluent).
Travel: Up to 10–15%, primarily domestic with occasional international travel.
Certifications (preferred): CISSP, CISM, GIAC, or equivalent cybersecurity certifications.
For more information on how we support the whole health of our employees throughout their wellness, career and life journey, please visit www.careers.jnj.com.
Johnson & Johnson announced plans to separate our Orthopaedics business to establish a standalone orthopaedics company, operating as DePuy Synthes. The process of the planned separation is anticipated to be completed within 18 to 24 months, subject to legal requirements, including consultation with works councils and other employee representative bodies, as may be required, regulatory approvals and other customary conditions and approvals. Should you accept this position, it is anticipated that, following conclusion of the transaction, you would be an employee of DePuy Synthes and your employment would be governed by DePuy Synthes employment processes, programs, policies, and benefit plans. In that case, details of any planned changes would be provided to you by DePuy Synthes at an appropriate time and subject to any necessary consultation processes.
Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.
Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers, internal employees contact AskGS to be directed to your accommodation resource.
#LI-Hybrid
#DePuySynthesCareers
Required Skills:
Preferred Skills:
Analytics Dashboards, Consulting, Customer Alignment, Data Analysis, Developing Others, Information Technology Strategies, Lateral Leadership, Organizing, Process Improvements, Product Portfolio Management, Project Management Methodology (PMM), Project Management Office (PMO), Risk Assessments, Robotic Automation, Strategic Thinking, Technical Credibility, Training PeopleThe anticipated base pay range for this position is :
122,000.00 - 245,000.00 USD AnnualAdditional Description for Pay Transparency:
Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)). Subject to the terms of their respective policies and date of hire, employees are eligible for the following time off benefits: • Vacation –120 hours per calendar year • Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year • Holiday pay, including Floating Holidays –13 days per calendar year • Work, Personal and Family Time - up to 40 hours per calendar year • Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child • Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year • Caregiver Leave – 80 hours in a 52-week rolling period10 days • Volunteer Leave – 32 hours per calendar year • Military Spouse Time-Off – 80 hours per calendar year For additional general information on Company benefits, please go to: - https://www.careers.jnj.com/employee-benefitsSkills Required
- Bachelor's degree in Computer Science, Information Security, Business, Engineering, or related field
- 10-12 years progressive experience in cybersecurity strategy, technology PMO, program/portfolio management, or IT risk management, including people leadership
- Proven experience building and running a cyber or technology PMO, including portfolio governance, executive reporting, and financial management
- Ability to develop and communicate multi-year strategy and transformation roadmaps for cybersecurity or broader technology functions
- Understanding of cybersecurity domains and their connection to enterprise risk and business outcomes
- Experience working in regulated environments (healthcare, life sciences, MedTech, or similar)
- Excellent executive communication, storytelling, and stakeholder management skills
- Master's degree in Cybersecurity, Information Systems, or Business Administration
- Experience supporting global organizations with distributed delivery models (including GCC/offshore)
- Familiarity with security and control frameworks such as NIST CSF or ISO 27001
- Experience leading large-scale cyber transformations (e.g., separations, M&A, ERP or cloud modernization)
- Prior experience managing significant budgets, vendor and workforce spend
- Certifications such as PMP, PgMP, SAFe, CISM, CISSP, or equivalent
- Cybersecurity certifications such as CISSP, CISM, GIAC
- English fluency
Johnson & Johnson Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Johnson & Johnson and has not been reviewed or approved by Johnson & Johnson.
-
Healthcare Strength — Healthcare coverage is characterized as comprehensive across medical, dental, and vision, with added supports like onsite clinics, fitness centers, and Employee Assistance resources. Mental-health services and wellbeing reimbursements are also described as meaningful components of the overall package.
-
Retirement Support — Retirement offerings are portrayed as a major differentiator, combining a 401(k) with employer matching and an employer-funded pension plan. Stock options and other long-term financial supports are also positioned as part of the broader rewards mix.
-
Parental & Family Support — Family-related benefits are presented as notably strong, including paid parental leave for all new parents and additional leave types for caregiving and bereavement. Financial assistance for adoption, fertility treatment, and surrogacy is highlighted as a significant support.
Johnson & Johnson Insights
What We Do
Profound Change Requires Boldness. Johnson & Johnson is the largest and most broadly based healthcare company in the world. We’re producing life-changing breakthroughs every day, and have been for the last 130 years. The combination of new technologies and your expertise enables amazing things to happen. Teams from J&J’s consumer business are creating digital tools to help people track the health of their skin. Those working in medical devices are 3-D printing artificial joints personalized for each patient, while researchers in pharmaceuticals use AI to discover lifesaving drugs. Imagine what the rest of our team of 134,000 people at 260 companies in more than 60 countries across the world is accomplishing. We redefine what it means to be a big company in today’s world. Social Media Community Guidelines: http://www.jnj.com/social-media-community-guidelines
