Sr. Manager, Security Architecture & Innovation R&D

At Johnson & Johnsonwe believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented treated and curedwhere treatments are smarter and less invasive andsolutions are our expertise in Innovative Medicine and MedTech we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow and profoundly impact health for more at

As guided by Our Credo Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Technology Enterprise Strategy & Security

Job Sub Function:

Solution Architecture

Job Category:

People Leader

All Job Posting Locations:

Raritan New Jersey United States of America Spring House Pennsylvania United States of America

Job Description:

Johnson & Johnson is recruiting a Sr. Manager Security Architecture & Innovation R&D in Spring House PA or Raritan NJ.

Join Information Security & Risk Management (ISRM) as the lead cybersecurity architect for Innovative Medicine R&D Discovery. This is an opportunity to shape how breakthrough science operates securely across laboratories operational technology (OT) clinical supply chain and pilot-plant environments. You will turn complex scientific needs into practical scalable solutions; modernize laboratory and OT security architecture; and accelerate priorities such as instrument onboarding secure data exchange laboratory automation and attributable access. From early discovery through production you will apply Zero Trust principles while protecting scientific agility availability safety validated state data integrity and regulatory compliance.

Responsibilities:

• Compose end-to-end security solution architecture. Partner with scientists and technology teams to translate R&D and laboratory workflows into clear requirements architecture options proofs of value and production-ready designs.
• Develop reference architectures that scale. Generate maintain and review current-state interim and target-state architectures standards decision records threat models control mappings and implementation patterns.
• Modernize R&D laboratory and OT security. Design risk-tiered asset onboarding secure instrument connectivity controlled data exchange laboratory automation and secure remote and third-party access.
• Make Zero Trust practical. Apply identity- asset- application- data- session- and purpose-aware controls least privilege continuous verification and micro-segmentation while accommodating legacy and non-agentable equipment.
• Set the modernization roadmap. Strengthen security patterns assess enterprise capabilities and emerging technologies test interoperability and failure modes and recommend vendor-neutral solutions based on risk value scalability cost and operability.
• Serve as a trusted design authority. Lead reviews maintain traceability from requirements to controls govern exceptions and resolve material security risk and operational gaps before implementation.
• Design for sustainable operations. Define ownership support monitoring incident response lifecycle management validation recovery supplier responsibilities service levels and production-readiness criteria.
• Unite diverse teams around a shared vision. Align R&D engineering Quality operations product teams sites and service providers across network OT identity endpoint data and laboratory initiatives.
• Demonstrate measurable impact. Establish baselines and communicate architecture adoption risk reduction delivery flow operational health customer experience and continual-improvement progress.

What Success Looks Like:

• Trusted architecture: 100% of material solutions have an approved architecture Service Design Package named owner and documented exceptions before build or production release.
• Reduced exposure: Apply identity- device- or asset-aware least-privilege controls to at least 90% of new access paths and reduce standing access unmanaged connectivity and high-risk exceptions each quarter.
• Production confidence: Ensure 100% of releases meet agreed security monitoring support recovery and rollback criteria with at least 95% of service-level objectives achieved monthly.
• Scalable adoption: Achieve at least 80% reuse of approved patterns and complete at least 85% of agreed improvement actions on time.

What You Will Bring:

• Bachelors degree or equivalent experience in technology cybersecurity engineering computer science or a related field.
• At least seven years of multifaceted cybersecurity or technology experience including security or solution architecture responsibilities.
• Proven success crafting security solutions in R&D laboratory and OT environments.
• Detailed experience generating maintaining and reviewing reference architectures standards decision records threat models and implementation guardrails.
• Ability to lead architecture from an ambiguous business need through requirements design implementation production transition and lifecycle improvement.
• Solid understanding of Zero Trust identity and privileged access segmentation endpoint and asset security secure connectivity cloud integration data transfer monitoring and incident-response integration.
• Experience in a highly regulated industry with exposure to robotics industrial automation or other safety-critical environments.
• Hands-on familiarity with laboratory systems scientific instrumentation robotics industrial control systems or process automation plus working knowledge of GxP IEC 62443 ISA-95 and relevant NIST guidance.
• Strong facilitation and interpersonal skills with the ability to align scientists engineers business partners and senior leaders around practical decisions.
• Relevant certifications are valued including CISSP-ISSAP SABSA Chartered Security Architect TOGAF AWS Certified Solutions Architect Professional Microsoft Certified: Azure Solutions Architect Expert Google Cloud Professional Cloud Architect CCSP GDSA GICSP ISA/IEC 62443 Cybersecurity Expert or ISA/IEC 62443 Cybersecurity Risk Assessment Specialist.

Required Skills:

Preferred Skills:

Change Management Consulting Cross-Functional Collaboration Developing Others Emerging Technologies Enterprise IT Governance Execution Focus Inclusive Leadership Information Security Management System (ISMS) Information Technology Strategies IT Architecture Leadership Product Configuration Product Lifecycle Management (PLM) Requirements Analysis Solution Architecture Team Management Technical Credibility

The anticipated base pay range for this position is :

$122000 - $211025

Additional Description for Pay Transparency:

Subject to the terms of their respective plans employees and/or eligible dependents are eligible to participate in the following Company sponsored employee benefit programs: medical dental vision life insurance short- and long-term disability business accident insurance and group legal insurance. Subject to the terms of their respective plans employees are eligible to participate in the Companys consolidated retirement plan (pension) and savings plan (401(k)). Subject to the terms of their respective policies and date of hire Employees are eligible for the following time off benefits: Vacation 120 hours per calendar year Sick time - 40 hours per calendar year; for employees who reside in the State of Washington 56 hours per calendar year Holiday pay including Floating Holidays 13 days per calendar year Work Personal and Family Time - up to 40 hours per calendar year Parental Leave 480 hours within one year of the birth/adoption/foster care of a child Condolence Leave 30 days for an immediate family member: 5 days for an extended family member Caregiver Leave 10 days Volunteer Leave 4 days Military Spouse Time-Off 80 hours Additional information can be found through the link below. Experience:

Manager