Johnson & Johnson

Sr. Manager, Zero Trust & Architecture

In short

Senior leadership role at Johnson & Johnson's DePuy Synthes business owning the enterprise-wide Zero Trust and cyber resiliency strategy across OT, networks, endpoints, cloud, and AI/data/application environments. Requires 15+ years of cybersecurity leadership experience spanning OT, network, endpoint, cloud, and application/data security, with proven Zero Trust architecture experience in complex global enterprises and the ability to build and lead a global cybersecurity team. Hybrid role based in one of several US MedTech/pharma manufacturing sites.

Job Overview
DePuy Synthes is recruiting for a Sr. Manager, Security Architecture and Zero Trust located at Raritan, NJ or Palm Beach Gardens, FL or Warsaw, IN or West Chester, PA or Raynham, MA or New Brunswick, NJ.
This leadership role owns the design and execution of DePuy Synthes' Zero Trust and cyber resiliency strategy across the enterprise. The Sr. Manager will drive security across operational technology (OT), networks, endpoints, cloud, and AI, Data & Application environments — ensuring that every user, device, workload, and dataset is continuously verified and protected. This position is critical to protecting sensitive healthcare and MedTech data, enabling secure digital transformation, and building durable, recoverable operations for the standalone company.
Key Responsibilities
•Define and lead the enterprise-wide Zero Trust strategy, reference architecture, roadmap, and investment priorities aligned with business, cybersecurity, and regulatory objectives.
•Embed Zero Trust principles and controls across operational technology, networks, endpoints, cloud, applications, data, identity, and hardware platforms.
•Lead security for AI, data, and application environments, including secure SDLC, code and API security, model integrity, data protection, and secure adoption of AI/ML and GenAI.
•Own the security strategy for operational technology and manufacturing environments while supporting production continuity and regulatory compliance.
•Define and execute enterprise network segmentation and micro-segmentation to reduce lateral movement across corporate, manufacturing, R&D, and cloud environments.
•Lead endpoint and device security across managed, unmanaged, mobile, and specialty devices using modern EDR/XDR, device posture, and conditional access capabilities.
•Own multi-cloud security across AWS, Azure, and GCP, including secure landing zones, workload protection, CSPM/CNAPP, guardrails, and automated policy enforcement.
•Lead enterprise email security and strengthen protection against phishing, business email compromise, account takeover, malware, and data exfiltration.
•Drive cyber and operational resilience through resilient architecture, business continuity and disaster recovery, recovery testing, incident readiness, and executive metrics.
•Build and lead a high-performing global cybersecurity team and partner with executives and cross-functional leaders to continuously evolve security priorities and controls.
Qualifications
Education
•Bachelor's degree in Computer Science, Information Security, Engineering, or related field required
•Advanced degree (e.g., Master's, MBA) preferred
Experience and Skills — Required
•15+ years of cybersecurity leadership experience, with deep expertise across multiple domains such as OT security, network security, endpoint protection, cloud security, and application/data security
•Proven experience defining and executing Zero Trust strategy and architecture in complex, global enterprise environments
•Strong background in vulnerability and exposure management, including risk-based prioritization and remediation at scale
•Hands-on knowledge of network segmentation, micro-segmentation, SASE, and ZTNA
•Experience securing multi-cloud (AWS, Azure, GCP) and hybrid environments, including CSPM/CNAPP tooling
•Demonstrated experience leading cyber resiliency, BCP/DR, and incident recovery programs
•Strong leadership, stakeholder management, and cross-functional collaboration skills, including managing global teams
Preferred
•Expertise in AI/ML security, data protection, and modern application security (including API and secure SDLC)
•Experience in healthcare, MedTech, pharmaceuticals, or other highly regulated industries
•Familiarity with global security and resilience frameworks (e.g., NIST CSF, NIST 800-207 Zero Trust, ISO 27001, ISO 22301, CIS, MITRE ATT&CK)
•Experience leading security through large-scale transformations, divestitures, or standalone company build-outs
•Strong understanding of auditing, monitoring, and compliance across security and resilience controls
•Certifications (preferred): GDSA, CISSP, CISM, CCSP, CCSK, or equivalent
Other
•Language: English proficiency required
•Travel: Up to 15% international and domestic travel
Pay
The anticipated base pay range for this position is 137,000.00 - 274,000.00 USD Annual.
Context
Johnson & Johnson announced plans to separate its Orthopaedics business to establish a standalone orthopaedics company, operating as DePuy Synthes. The process of the planned separation is anticipated to be completed within 18 to 24 months, subject to legal requirements, including consultation with works councils and other employee representative bodies, as may be required, regulatory approvals and other customary conditions and approvals. Should you accept this position, it is anticipated that, following conclusion of the transaction, you would be an employee of DePuy Synthes and your employment would be governed by DePuy Synthes employment processes, programs, policies, and benefit plans.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot