At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https: //www.jnj.com

Job Function:

Technology Enterprise Strategy & Security

Job Sub Function:

Data Architecture

Job Category:

People Leader

All Job Posting Locations:

Athens, Georgia, United States of America, Athens, Georgia, United States of America, Boise, Idaho, United States, Boston, Massachusetts, United States of America, Burlington, Vermont, United States, Charleston, South Carolina, United States, Charleston, West Virginia, United States, Cincinnati, Ohio, United States of America, Colorado Springs, Colorado, United States of America, Columbia, Missouri, United States, Concord, New Hampshire, United States, Dallas, Texas, United States, Detroit, Michigan, United States, Dover, Delaware, United States, Fargo, North Dakota, United States, Grand Rapids, Michigan, United States, Iowa City, Iowa, United States, Irvine, California, United States of America, Las Vegas, Nevada, United States, Louisville, Kentucky, United States, Minneapolis, Minnesota, United States of America, Mooresville, Indiana, United States of America, Nashville, Tennessee, United States, Oklahoma City, Oklahoma, United States, Omaha, Nebraska, United States{ + 10 more}

Job Description:

We are looking for the best talent for Manager of Cybersecurity Metrics & Reporting to support Information Security & Risk Management (ISRM) at Johnson & Johnson. This role can be based in Raritan, NJ or remote US.

This is a highly collaborative position with the goal of providing transparency and understanding around the threats that face us as a company, enabling data driven decision making and awareness of the maturity of our capabilities, through a foundation of data storytelling and visualization. The prospective candidate will partner with the Director of Cyber Metrics and Reporting to own and manage the governance processes related to dashboard delivery and expand a comprehensive set of cybersecurity dashboards, metrics, and reporting initiatives.

In this role, you will own the cybersecurity metrics process that defines quantifiable measurements, assesses the effectiveness of our security controls and cybersecurity posture. You will provide insights into threat patterns, incident response efficiency, infrastructure and application vulnerabilities, cyber risk quantification, and enable the ISRM organization to make informed decisions, minimize risk, and improve defenses.

Responsibilities

• Ensure our scrum team and developers follow and execute delivery processes, keep obstacles and distractions out of the team’s path and act as the interface between the scrum team, organization leadership, data analytics and product teams.
• Facilitate communication between the Cyber Metrics team and BISOs, Cyber Product Owners, Cyber Service Owners, and any additional stakeholders. Be responsible for ensuring the team’s delivery progress is transparent to all stakeholders.
• Collaborate across teams to identify key cybersecurity metrics, prioritization and establish standard reporting frameworks.
• Design and build visually appealing and user-friendly cybersecurity dashboards using PowerBI.
• Collect, analyze, and interpret large datasets to identify trends, patterns, and anomalies in cybersecurity metrics.
• Translate complex technical metrics into easily understandable visualizations, infographics, and other reporting formats.
• Provide executive-level reporting and insights on the effectiveness of cybersecurity programs, controls, and risk management efforts.
• Continually evaluate and improve the cybersecurity dashboards and reporting processes based on feedback and evolving requirements.
• Stay updated on emerging trends and best practices in cybersecurity metrics and reporting.

Required:

• Minimum Bachelor's degree in Cybersecurity, Data analytics, Information Systems, or a related field.
• A minimum of 8 years of demonstrable experience in cyber metrics and reporting, business analytics, requirements analysis, forecasting, industry research, planning, and/or management consulting required to enable data storytelling to enable visualization
• Strong expertise in quantitative risk frameworks (FAIR, NIST, MITRE)
• Experience with scripting languages (Python, Perl, Bash, PHP, etc.). Strong Information Security Industry background including one or more Security certifications (CISSP, CISM, CISA). Solid understanding of Security concepts.
• Understanding of designing and developing cybersecurity dashboards using tools like Tableau, Power BI, or similar.
• Strong experience with requirements analysis and testing
• Ability to collect, analyze, and interpret large datasets to derive relevant insights and trends.
• Ability to effectively collect and communicate complex information to customers.
• Proactive and self-motivated approach to work, with excellent problem-solving and analytical skills.
• Superb communication and storytelling skills, with the ability to shape messages for various audiences; including insights to executive-level audiences.
• Analytical approach, with the ability to analyze data and identify insights.
• Strong collusiveness and customer management skills with a track record of successful delivery across multi-functional teams.
• Ability to work effectively at all levels of the organization, from executive committee to individual employees.
• Awareness of relevant industry trends and standard processes in cybersecurity metrics and reporting.
• Demonstrated Project Management, Scrum, Agile skills is required

Preferred:

• Strong knowledge of cybersecurity principles, frameworks, and risk management concepts.
• Relevant certifications are highly desirable.
• Expertise in domain specific data sets of cybersecurity and business data sources preferred
• Diversity of experience is preferred, with demonstrated learning agility and application of new innovative skills/techniques
• Certified Scrum Master (CSM) certification is a plus
• Certified Information Security Management (CISM) certification is a plus.
• Metrics, Data & Analytics certification is a plus
• Associate Certified Analytics Professional (aCAP)
• Certified Analytics Professional (CAP)
• CDP Data Analyst
• CDP Generalist
• CompTIA Data+
• Google Data Analytics Professional Certificate
• IBM Data Analyst Professional Certificate
• Microsoft Certified Power BI Data Analyst Associate

Percentage Traveled: 10%

Travel on the Job: position will require travel to Town Halls and critical workshops.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson and Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, please email the Employee Health Support Center (ra-employeehealthsup@its.jnj.com) or contact AskGS to be directed to your accommodation resource.

#JNJTech

#LI-Remote

The anticipated base pay range for this position is:

$100, 000 to $172, 500

Additional Description for Pay Transparency:

The Company maintains highly competitive, performance-based compensation programs. Under current guidelines, this position is eligible for an annual performance bonus in accordance with the terms of the applicable plan. The annual performance bonus is a cash bonus intended to provide an incentive to achieve annual targeted results by rewarding for individual and the corporation’s performance over a calendar/performance year. Bonuses are awarded at the Company’s discretion on an individual basis. Employees and/or eligible dependents may be eligible to participate in the following Company sponsored employee benefit programs: medical, dental, vision, life insurance, short- and long-term disability, business accident insurance, and group legal insurance. Employees may be eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)). Employees are eligible for the following time off benefits: Vacation – up to 120 hours per calendar year Sick time - up to 40 hours per calendar year; for employees who reside in the State of Washington – up to 56 hours per calendar year Holiday pay, including Floating Holidays – up to 13 days per calendar year of Work, Personal and Family Time - up to 40 hours per calendar year Additional information can be found through the link below. https: //www.careers.jnj.com/employee-benefits