Supply Chain Logistics and Ot Security Manager

Johnson and Johnson is recruiting for a **Supply Chain Logistics and OT Security Manager, **located in Raritan, NJ; Turnhoutseweg, Belgium; Gubelstrasse, Switzerland; Wallingstown, Ireland; Spring House, PA; Horsham, PA; Bridgewater, NJ or Markham, ON.

The role focuses on crafting and running the cybersecurity program to:

- Provide consulting to IT and engineering teams on standards, design, implementation, and testing of secure IT and OT (ICS/Distribution Centre Automation) and networks and infrastructure.
- Provide assurance to senior leadership on the cyber security risk posture of the logistics capabilities within J&J’s global supply chain, including performing and managing assessments and design reviews of current and to-be solutions and environments, ranking risks and providing coaching and guidance on remediation.
- Shape strategy for security capabilities needed, influence business funding and adoption and partner in the selection and deployment of those capabilities.
- Influence the cyber security strategy for the J&J global supply chain.
- Monitor the industry landscape for emerging threats, technologies and capabilities.

**Key Responsibilities**:

- Manage the execution of the cyber security program for logistics, including:

- Manage complex network of senior stakeholders in the region across both Logistics and Customer Connectivity product lines, JJTS, Regional Deliver BTL, regional Engineering teams, facilities, compliance groups and others.
- Provide security SME consulting and design reviews in support of technology projects.
- Manage metrics and dashboards to enable effective management of risk.
- Build and maintain relationships with leaders to the Senior Director level within areas of responsibility to provide assurance on security risk and influence direction of resources to appropriate mitigations.
- Continuously improve the cyber security program, for example:

- Support identification and implementation of security tools and design patterns (e.g. firewall deployments, IDR, AV, SIEM, deception technology).
- Develop technical standards, associated training materials and implementation guidance.
- Drive process improvements and productivity gains to drive increasing value from existing resources.
- Coach and develop the internal direct team and establish a network of security champions within the distribution centers globally.
- Actively monitor new threats and vulnerabilities, advising IT and Engineering teams on appropriate actions to address them.

**Qualifications**

**Education**:
At least a Bachelor's degree is required.

**Experience and Skills**:
**Required**:

- A minimum of 5 years of experience working in IT and/or Engineering with a security focus is required, including hands-on implementation level understanding of key security technologies and controls (e.g. remote access, access control, firewalls, IDP/IDR, anti-malware, patch management, encryption technologies, forensics etc.)
- Experience analyzing IT and Operational Technology architecture to identify security gaps and crafting solutions.
- Experience performing security audits and assessments based on technical security frameworks such as NIST
800-53/800-82
, ISO 27001, IEC 62433, RG 5.71, NEI 08-09, etc.
- Solid understanding of the security landscape including trends in process, tooling and threats.
- Understanding of cloud, virtualized environments and emerging digital capabilities.
- Demonstrable track record of working within large projects and leading multiple competing priorities.
- Big Picture/Attention to Detail - align strategic and tactical security aspects.
- Results Orientation/Sense of Urgency - ability to aim to tight timelines.
- Excellent interpersonal skills and creative problem solving skills are required.
- Customer focus (internal & external) required.
- Excellent communication skills, ability to network, interface and influence at all levels of the organization, cross sector, cross-functionally and globally.
- Demonstrable ability to influence/collaborate to get to desired result.
- Strong leadership skills.

**Preferred**:

- Hands-on experience of integration with hospitals and health-care environments is helpful.
- Experience of penetration testing and penetration testing tools is desirable.
- Experience working within an incident response team is desirable.

Johnson & Johnson is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

**Primary Location**
United States-New Jersey-Raritan-1003 US HIghway 202

**Other Locations**
Europe/Middle East/Africa-Ireland-Cork-LittleIsland, Europe/Middle East/Africa-Switzerland-Zug, United States-New Jersey-Bridgewater, Belgium-Antwerp-Beerse, Canada-Ontario-Markham, United States-Pennsy