Professional, Compliance Lead

Johnson & Johnson · New Brunswick, NJ

RoleLantern checked

QualityFull-timeCompany career page

The apply link worked recently (not employer-confirmed).

Role summary

Johnson & Johnson seeks an experienced Compliance Lead to direct cybersecurity governance and risk management across DePuy Synthes. The role establishes policy frameworks, manages enterprise cyber risk assessments, oversees third-party security oversight, and delivers executive-level compliance reporting.

What they're looking for

6+ years progressive experience in cybersecurity governance, IT risk management, or GRC discipline
Demonstrated ownership of security policy and standards framework with exception management experience
Advanced knowledge of NIST CSF, NIST 800-53, ISO 27001/27002, and COBIT frameworks
Proven expertise designing and operating cyber risk assessment methodology and enterprise risk registers
Experience defining KRIs and building executive risk reporting for leadership decision-making
Background leading vendor cyber risk programs including SOC 2 and ISO evidence review
Strong facilitation and stakeholder influencing capabilities

What you'll be doing

Lead cybersecurity policy and standards program lifecycle including governance, approvals, and exception management
Define and maintain enterprise cyber risk framework, methodology, taxonomy, and risk appetite statements
Direct cyber risk assessments across applications, infrastructure, and business processes with consistency oversight
Own enterprise cyber risk register governance including data quality and escalation of elevated risks
Chair cybersecurity governance forums and deliver executive reporting translating risk data into business narratives

Privacy & handoff

This role links to Johnson & Johnson's own application system. RoleLantern records your interest and checks the link, but the application happens on the employer's site and status updates may not come back to us. Clicking apply does not mark you as applied automatically.

What RoleLantern checked

This role is listed from an approved source. RoleLantern checks that the application link is live and how recently the role appeared — the employer has not confirmed it directly on RoleLantern.

RoleLantern checked active

RoleLantern checkedNeeds clarity

Date posted1 day ago

Last source checkToday

Salary listedNeeds clarity

Location clearClear

Something look off? Let us know and we may ask the employer to verify it.

See how you match this role

Upload your CV to see which of this role's requirements your background supports, where there may be gaps, and what needs clarification. Private by default — we never sell your CV.

See my match