At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com
As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.
Job Function:
Technology Enterprise Strategy & SecurityJob Sub Function:
Security & ControlsJob Category:
People LeaderAll Job Posting Locations:
New Brunswick, New Jersey, United States of America, Palm Beach Gardens, Florida, United States of America, Raynham, Massachusetts, United States of America, Warsaw, Indiana, United States of America, West Chester, Pennsylvania, United States of AmericaJob Description:
Johnson & Johnson announced plans to separate our Orthopaedics business to establish a standalone Orthopaedics company, operating as DePuy Synthes. The process of the planned separation is anticipated to be completed within 18 to 24 months, subject to legal requirements, including consultation with works councils and other employee representative bodies, as may be required, regulatory approvals and other customary conditions and approvals. Should you accept this position, it is anticipated that, following conclusion of the transaction, you would be an employee of DePuy Synthes, and your employment would be governed by DePuy Synthes employment processes, programs, policies, and benefit plans. In that case, details of any planned changes would be provided to you by DePuy Synthes at an appropriate time and subject to any necessary consultation processes.
About DePuy Synthes
DePuy Synthes is a global leader in Orthopaedics, advancing patient care through innovative solutions across joint reconstruction, trauma, spine, sports medicine, and related surgical technologies. As DePuy Synthes separates from Johnson & Johnson to become the world’s largest, most comprehensive Orthopaedics-focused company, the organization is entering a defining chapter—establishing its own corporate identity, voice, culture, and reputation while continuing to serve patients, customers, and healthcare systems around the world.
Job Overview
The Sr. Director, Identity & Access Management (IAM) is a senior IT and Cybersecurity leader responsible for defining and executing the enterprise IAM strategy to protect DePuy Synthes’ digital ecosystem, products, and patient‑adjacent technologies. This role has a critical impact on safeguarding sensitive data, enabling secure business transformation, and ensuring regulatory compliance across a global organization. The position partners closely with IT, Cybersecurity, Compliance, Legal, and business leaders to balance security, usability, and scalability while leading a high‑performing IAM organization and reports into the DePuy Synthes Technology organization.
Key Responsibilities
Define and lead the enterprise IAM strategy, roadmap, and operating model aligned to DePuy Synthes business and cybersecurity objectives.
Oversee identity lifecycle management, access governance, authentication, authorization, and privileged access management across global platforms.
Ensure IAM capabilities meet regulatory, privacy, and audit requirements, including support for healthcare, data protection, and security standards.
Partner with IT and business leaders to embed secure‑by‑design identity controls into applications, cloud platforms, and digital initiatives.
Lead and develop a global IAM organization, including talent strategy, succession planning, and performance management.
Establish and monitor IAM metrics, risk indicators, and service performance to drive continuous improvement and transparency.
Manage third‑party IAM vendors and service providers, ensuring contractual performance, cost effectiveness, and innovation.
Act as a senior advisor on identity‑related risk, incidents, and escalations, including executive and board‑level communications when required.
Education
Required: Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
Preferred: Master’s degree (MS, MBA, or equivalent) with a focus on technology, security, or business leadership.
Experience and Skills
Required:
12-14 years of experience in IT and/or Cybersecurity roles, with significant focus on Identity & Access Management at an enterprise scale.
Deep knowledge of IAM technologies, including identity governance, SSO, MFA, PAM, and directory services.
Demonstrated ability to translate business needs into secure, scalable IAM solutions.
Strong stakeholder management and executive communication skills.
Preferred:
Experience supporting healthcare, life sciences, or medical device organizations.
Proven leadership experience managing global teams and complex IAM programs in a regulated environment.
Experience with large‑scale cloud and hybrid IAM implementations.
Familiarity with global privacy and security regulations impacting identity and access controls.
Demonstrated success leading transformational security initiatives.
Other:
Language: English (additional languages a plus).
Travel: Up to 20%, domestic and international.
Certifications (preferred): CISSP, CISM, CIAM, or equivalent IAM/security certifications.
For more information on how we support the whole health of our employees throughout their wellness, career and life journey, please visit www.careers.jnj.com.
Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.
Johnson and Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation, please email the Employee Health Support Center (ra-employeehealthsup@its.jnj.com) or contact AskGS to be directed to your accommodation resource.
#DePuySynthesCareers
Required Skills:
Preferred Skills:
Business Process Design, Crisis Management, Critical Thinking, Cybersecurity, Developing Others, Inclusive Leadership, Industry Analysis, Information Security Auditing, Information Security Management System (ISMS), Information Technology (IT) Security Assessments, Information Technology Strategies, Leadership, Presentation Design, Process Optimization, Risk Management Framework, Security Architecture Design, Security Policies, Strategic Thinking
The anticipated base pay range for this position is :
$178,000.00 - $307,050.00Additional Description for Pay Transparency:
Subject to the terms of their respective policies and date of hire, employees are eligible for the following time off benefits: