
The Principal – Third Party Cyber Risk Assessment role serves as a senior technical authority within the Information Security & Risk Management team at Johnson & Johnson. The position focuses on leading global assessments of cyber risks associated with vendors, SaaS providers, and strategic partners. Key responsibilities include performing deep technical reviews of security controls, evaluating complex risk scenarios involving cross-border data flows, and driving process automation and improvements. The role also involves mentoring junior team members and communicating risk findings to senior leadership. This position offers the opportunity to work within a diverse, global team dedicated to advancing healthcare innovation. The work arrangement is hybrid, with a preference for the Raritan, New Jersey location, though opportunities exist in Brazil and Poland.










