OT Cybersecurity Manager

At Johnson & Johnson, we believe health is everything.

Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com

Job Function:
Technology Enterprise Strategy & Security

Job Sub Function:
Security & Controls

Job Category:
Scientific/Technology

All Job Posting Locations:
São José dos Campos, São Paulo, Brazil, São Paulo, Brazil, Warsaw, Masovian, Poland

Job Description:

The cybersecurity manager will advance the security program which covers Johnson and Johnson’s supply chain and research and development environments to protect our patients and critical operations.

The person in this role will ensure strong controls are in place at our sites for applications, infrastructure, industrial IoT, automation equipment, site security and third-party vendor risk.

This position will play a meaningful role to:



* Develop the OT security framework to ensure controls are implemented across our sites.


* Build training material for security team members and support partners to strengthen risk and vulnerability management, cybersecurity controls and governance.


* Implement security capabilities needed, partner with business partners to deploy and assist with adoption.


* Drive the advancement of the cyber security strategy for the J&J (Johnson & Johnson) global R&D and supply chain.


* Incorporate insights on emerging threats, technologies, and capabilities from the industry landscape into the OT cybersecurity program

Key Responsibilities include:



* Working with the broader security team to design and deploy risk sensing, automation, and analytics solutions for critical security controls to advance vulnerability management and improve the risk posture of the OT environment.


* Providing requirements to the engineering teams to advance threat monitoring and detection.


* Strengthening the governance framework, including technical standards, training materials, and implementation guidelines to provide visibility of risk posture and improvements.


* Continuously improve the OT cyber security framework by enhancing the coverage and integration security tools and design patterns (e.g., ICE (Isolated Computing Environment) firewall deployments, IDR, AV, SIEM, deception technology).


* Actively monitor new threats and vulnerabilities, engaging IT (Information Technology) and Engineering teams on appropriate actions to address them.

Education:


* BA/BS or comparable security experience, certifications, or military security experience.

Required Experience and Skills:


* Consistent rec...