Job description

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit. Job Function: Technology Enterprise Strategy & Security Job Sub Function: Identity Governance & Administration Job Category: People Leader All Job Posting Locations: New Brunswick, New Jersey, United States of America, Raritan, New Jersey, United States of America, Spring House, Pennsylvania, United States of America, Tampa, Florida, United States of America Job Description: At Johnson & Johnson, we believe cybersecurity is a shared responsibility. We are seeking a strategic, highly motivated Senior Manager, Cybersecurity Awareness & Training at Johnson & Johnson. This is a unique opportunity for an experienced professional to reimagine cybersecurity awareness, training and human risk management at one of the world's largest healthcare organizations. Reporting to the Director, Cybersecurity Awareness & Training, this person will drive secure behaviors and strengthen cybersecurity culture across our global workforce of 200,000+ employees and contractors through modern, AI-enabled learning experiences, while serving as the strategic owner of human risk management capabilities that reduce risk and improve organizational resilience. The primary location for this position will be in Raritan, NJ and can also be located at J&J U.S. office sites on the East Coast. The ideal candidate is an experienced cybersecurity awareness, training, or human risk management professional who understands how to turn cybersecurity priorities into behavior-changing employee experiences. They bring a strong mix of cyber fluency, strong communications skills and judgment, modern learning expertise, data-driven decision-making, and executive acumen. This person is a highly proactive, strategic operator who can spot opportunities, influence global stakeholders, and lead multiple complex initiatives from idea to measurable impact. Key Responsibilities • Execute global cybersecurity awareness, training, and engagement strategies aligned to business priorities, organizational risk, cyber threat trends, and regulatory requirements. • Serve as the Product and Service Owner for Human Risk Management products and services, defining strategy, roadmap, priorities, adoption plans, and continuous improvements that advance cybersecurity awareness, education, behavior change, and human risk reduction. • Design and deliver enterprise-wide awareness campaigns, role-based learning journeys, leadership engagement programs, and targeted interventions for high-risk populations. • Shape and continuously evolve modern learning experiences through microlearning, gamification, AI-enabled education, and other innovative approaches, leveraging industry best practices, behavioral science, and emerging technologies. • Identify, evaluate, and implement AI and automation capabilities that enhance awareness, training, communications, and employee engagement programs, while promoting the secure and responsible use of AI across the enterprise. • Establish and monitor KPIs that measure security culture, behavior change, risk reduction, and program effectiveness; analyze phishing, training, and engagement data to identify trends, optimize interventions, and develop executive insights and reporting. • Oversee awareness and training technologies, reporting platforms, vendor relationships, and external partners to ensure effective program delivery, scalability, and continuous innovation. • Build strong partnerships across Corporate Affairs, Learning & Development, Cyber Threat Intelligence, Business Information Security teams, and other key stakeholders to translate emerging threats into timely education and engagement initiatives while advancing a culture of secure behaviors across the enterprise. Qualifications Required • Bachelor's degree required. Degree or professional background in Learning and Development, Organizational Change and Communications, Cybersecurity, Computer Science, or a related field. • Minimum 8-10 years of professional experience, with preferred experience leading or supporting cybersecurity awareness, training, human risk management, technology communications, learning and development, and organizational change. • Strong knowledge of cybersecurity and human-risk topics, including social engineering, phishing, identity and access management, data protection, cloud security, insider risk, secure use of emerging technologies, and the behaviors that contribute to human-related cyber risk. • Demonstrated ability to independently lead complex, cross-functional initiatives from strategy through execution. • Strong executive communication skills, with the ability to translate technical concepts into clear, business-relevant communications and learning experiences. • Proven ability to influence stakeholders, build alignment, and partner effectively across global teams and functions. • Experience using data, metrics, and insights to assess program effectiveness, identify high-risk audiences, and recommend targeted improvements. Preferred • Experience with advanced phishing simulation platforms, human risk management platforms, and behavioral analytics. • Digital product and/or service owner experience preferred, including experience shaping product strategy, prioritizing roadmaps, anticipating stakeholder needs, and applying AI-enabled capabilities to improve employee learning, engagement, or risk reduction outcomes. • SANS Security Awareness Professional (SSAP) or similar industry certifications a plus. What Success Looks Like The successful candidate is: • A self-starter who proactively identifies opportunities and delivers program results on time and with minimal direction. • A strategic thinker who connects cybersecurity awareness objectives to business priorities, human risk reduction, and employee behavior change. • An effective leader through influence who builds alignment across global teams, functions and stakeholders. • A strong communicator who can engage equally well with executives, technology professionals, and non-technical employees with clarity, credibility and impact. #JNJTECH #LI-Hybrid Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act. Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, please contact us via jnj.com or contact AskGS to be directed to your accommodation resource. Required Skills: Preferred Skills: The anticipated base pay range for this position is : The anticipated base pay range for this position is: $122,000- $212,750 Additional Description for Pay Transparency: Subject to the terms of their respective plans, employees and/or eligible dependents are eligible to participate in the following Company sponsored employee benefit programs: medical, dental, vision, life insurance, short- and long-term disability, business accident insurance, and group legal insurance. Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)). Subject to the terms of their respective policies and date of hire, Employees are eligible for the following time off benefits: Vacation –120 hours per calendar year Sick time - 40 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year Holiday pay, including Floating Holidays –13 days per calendar year Work, Personal and Family Time - up to 40 hours per calendar year Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child Condolence Leave – 30 days for an immediate family member: 5 days for an extended family member Caregiver Leave – 10 days Volunteer Leave – 4 days Military Spouse Time-Off – 80 hours Additional information can be found through the link below. careers.jnj.com

Requirements

Must-haves

Technology Enterprise Strategy & Security Job Sub Function:
Identity Governance & Administration Job Category:
New Brunswick, New Jersey, United States of America, Raritan, New Jersey, United States of America, Spring House, Pennsylvania, United States of America, Tampa, Florida, United States of America Job Description:
At Johnson & Johnson, we believe cybersecurity is a shared responsibility.
Execute global cybersecurity awareness, training, and engagement strategies aligned to business priorities, organizational risk, cyber threat trends, and regulatory requirements.
Design and deliver enterprise-wide awareness campaigns, role-based learning journeys, leadership engagement programs, and targeted interventions for high-risk populations.
Oversee awareness and training technologies, reporting platforms, vendor relationships, and external partners to ensure effective program delivery, scalability, and continuous innovation.
Bachelor's degree required. Degree or professional background in Learning and Development, Organizational Change and Communications, Cybersecurity, Computer Science, or a related field.
Demonstrated ability to independently lead complex, cross-functional initiatives from strategy through execution.
Strong executive communication skills, with the ability to translate technical concepts into clear, business-relevant communications and learning experiences.
Proven ability to influence stakeholders, build alignment, and partner effectively across global teams and functions.
Experience using data, metrics, and insights to assess program effectiveness, identify high-risk audiences, and recommend targeted improvements.
A self-starter who proactively identifies opportunities and delivers program results on time and with minimal direction.
A strategic thinker who connects cybersecurity awareness objectives to business priorities, human risk reduction, and employee behavior change.
An effective leader through influence who builds alignment across global teams, functions and stakeholders.
A strong communicator who can engage equally well with executives, technology professionals, and non-technical employees with clarity, credibility and impact.

Nice-to-haves

Experience with advanced phishing simulation platforms, human risk management platforms, and behavioral analytics.
SANS Security Awareness Professional (SSAP) or similar industry certifications a plus.
What Success Looks Like

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: jnj
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave