Sr. Manager, Security Architecture & Innovation - R&D

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit. Job Function: Technology Enterprise Strategy & Security Job Sub Function: Solution Architecture Job Category: People Leader All Job Posting Locations: Raritan, New Jersey, United States of America, Spring House, Pennsylvania, United States of America Job Description: Johnson & Johnson is recruiting a Sr. Manager, Security Architecture & Innovation – R&D in Spring House, PA or Raritan, NJ. Join Information Security & Risk Management (ISRM) as the lead cybersecurity architect for Innovative Medicine R&D Discovery. This is an opportunity to shape how breakthrough science operates securely across laboratories, operational technology (OT), clinical supply chain and pilot-plant environments. You will turn complex scientific needs into practical, scalable solutions; modernize laboratory and OT security architecture; and accelerate priorities such as instrument onboarding, secure data exchange, laboratory automation and attributable access. From early discovery through production, you will apply Zero Trust principles while protecting scientific agility, availability, safety, validated state, data integrity and regulatory compliance. Responsibilities: Compose end-to-end security solution architecture. Partner with scientists and technology teams to translate R&D and laboratory workflows into clear requirements, architecture options, proofs of value and production-ready designs. Develop reference architectures that scale. Generate, maintain and review current-state, interim and target-state architectures, standards, decision records, threat models, control mappings and implementation patterns. Modernize R&D laboratory and OT security. Design risk-tiered asset onboarding, secure instrument connectivity, controlled data exchange, laboratory automation, and secure remote and third-party access. Make Zero Trust practical. Apply identity-, asset-, application-, data-, session- and purpose-aware controls, least privilege, continuous verification and micro-segmentation while accommodating legacy and non-agentable equipment. Set the modernization roadmap. Strengthen security patterns, assess enterprise capabilities and emerging technologies, test interoperability and failure modes, and recommend vendor-neutral solutions based on risk, value, scalability, cost and operability. Serve as a trusted design authority. Lead reviews, maintain traceability from requirements to controls, govern exceptions and resolve material security, risk and operational gaps before implementation. Design for sustainable operations. Define ownership, support, monitoring, incident response, lifecycle management, validation, recovery, supplier responsibilities, service levels and production-readiness criteria. Unite diverse teams around a shared vision. Align R&D, engineering, Quality, operations, product teams, sites and service providers across network, OT, identity, endpoint, data and laboratory initiatives. Demonstrate measurable impact. Establish baselines and communicate architecture adoption, risk reduction, delivery flow, operational health, customer experience and continual-improvement progress. What Success Looks Like: Trusted architecture: 100% of material solutions have an approved architecture, Service Design Package, named owner and documented exceptions before build or production release. Reduced exposure: Apply identity-, device- or asset-aware least-privilege controls to at least 90% of new access paths and reduce standing access, unmanaged connectivity and high-risk exceptions each quarter. Production confidence: Ensure 100% of releases meet agreed security, monitoring, support, recovery and rollback criteria, with at least 95% of service-level objectives achieved monthly. Scalable adoption: Achieve at least 80% reuse of approved patterns and complete at least 85% of agreed improvement actions on time. What You Will Bring: Bachelor’s degree or equivalent experience in technology, cybersecurity, engineering, computer science or a related field. At least seven years of multifaceted cybersecurity or technology experience, including security or solution architecture responsibilities. Proven success crafting security solutions in R&D laboratory and OT environments. Detailed experience generating, maintaining and reviewing reference architectures, standards, decision records, threat models and implementation guardrails. Ability to lead architecture from an ambiguous business need through requirements, design, implementation, production transition and lifecycle improvement. Solid understanding of Zero Trust, identity and privileged access, segmentation, endpoint and asset security, secure connectivity, cloud integration, data transfer, monitoring and incident-response integration. Experience in a highly regulated industry with exposure to robotics, industrial automation or other safety-critical environments. Hands-on familiarity with laboratory systems, scientific instrumentation, robotics, industrial control systems or process automation, plus working knowledge of GxP, IEC 62443, ISA-95 and relevant NIST guidance. Strong facilitation and interpersonal skills, with the ability to align scientists, engineers, business partners and senior leaders around practical decisions. Relevant certifications are valued, including CISSP-ISSAP, SABSA Chartered Security Architect, TOGAF, AWS Certified Solutions Architect – Professional, Microsoft Certified: Azure Solutions Architect Expert, Google Cloud Professional Cloud Architect, CCSP, GDSA, GICSP, ISA/IEC 62443 Cybersecurity Expert or ISA/IEC 62443 Cybersecurity Risk Assessment Specialist. Required Skills: Preferred Skills: Change Management, Consulting, Cross-Functional Collaboration, Developing Others, Emerging Technologies, Enterprise IT Governance, Execution Focus, Inclusive Leadership, Information Security Management System (ISMS), Information Tec