Professional Governance & Policy Analyst

Johnson & Johnson · New Brunswick, NJ +5 more

RoleLantern checked

Corporate & BusinessFull-timeCompany career page

The apply link worked recently (not employer-confirmed).

Role summary

Johnson & Johnson seeks a Governance & Policy Analyst for DePuy Synthes to design and maintain the cybersecurity policy framework, manage risk assessments, and oversee governance reporting. The role bridges regulatory requirements and internal risk management across the enterprise, supporting executive decision-making and compliance initiatives.

What they're looking for

Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, or related field
4+ years of cybersecurity governance, IT risk management, or GRC experience
Demonstrated experience authoring and maintaining security policies and standards
Working knowledge of NIST CSF, NIST 800-53, ISO 27001/27002, and COBIT frameworks
Hands-on experience conducting risk assessments and managing risk registers
Experience producing leadership-ready reporting, metrics, and governance dashboards
Master's degree in Cybersecurity, Information Systems, or Business Administration preferred

What you'll be doing

Author, review, and maintain cybersecurity policies, standards, procedures, and guidelines on defined lifecycle
Maintain and improve cyber risk management framework, including risk taxonomy, scoring, and treatment workflows
Facilitate and document cyber risk assessments across applications, infrastructure, and business processes
Administer the enterprise risk register as single source of truth for risk tracking and escalation
Coordinate cybersecurity governance forums and develop executive reporting packages for leadership audiences

Privacy & handoff

This role links to Johnson & Johnson's own application system. RoleLantern records your interest and checks the link, but the application happens on the employer's site and status updates may not come back to us. Clicking apply does not mark you as applied automatically.

What RoleLantern checked

This role is listed from an approved source. RoleLantern checks that the application link is live and how recently the role appeared — the employer has not confirmed it directly on RoleLantern.

RoleLantern checked active

RoleLantern checkedNeeds clarity

Date posted1 day ago

Last source checkToday

Salary listedNeeds clarity

Location clearClear

Something look off? Let us know and we may ask the employer to verify it.

See how you match this role

Upload your CV to see which of this role's requirements your background supports, where there may be gaps, and what needs clarification. Private by default — we never sell your CV.

See my match