Senior Manager, Product Security - Shockwave Medical

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world.  We provide an inclusive work environment where each person is considered as an individual.  At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit. Job Function: Technology Enterprise Strategy & Security Job Sub Function: Security & Controls Job Category: People Leader All Job Posting Locations: Santa Clara, California, United States of America Job Description: Johnson & Johnson is hiring for a Sr. Manager, Product Security – Shockwave Medical to join our team located in Santa Clara, CA.   At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com/ .   Fueled by innovation at the intersection of biology and technology, we’re developing the next generation of smarter, less invasive, more personalized treatments. Ready to join a team that’s pioneering the development and commercialization of Intravascular Lithotripsy (IVL) to treat complex calcified cardiovascular disease. Our Shockwave Medical portfolio aims to establish a new standard of care for medical device treatment of atherosclerotic cardiovascular disease through its differentiated and proprietary local delivery of sonic pressure waves for the treatment of calcified plaque.

Overview The Sr. Manager, Product Security provides technical leadership supporting product cybersecurity strategy and execution. This position is responsible for defining secure architecture patterns and controls for medical devices and guiding advanced security real-world testing approaches. The position partners closely with engineering, quality, PMO, and regulatory to translate global cybersecurity expectations into practical and scalable engineering solutions. Essential Job Functions serve as the functional owner of product security within the Business Unit, accountable for defining, governing, and ensuring execution of product security processes and tools in alignment with J&J Quality Standards. Define and architect defense in depth security controls including hardware root of trust, secure boot, cryptographic services (PKI/TLS), identity and access management, secure update mechanisms, and trusted device to cloud communications. Conduct medical devices threat modeling, secure design reviews, and cyber risk assessments for new and existing product platforms. Support cybersecurity submission readiness by contributing technical direction, regulatory evidence, architecture rationale, and risk mitigation strategies. Lead emerging cyber technologies (AI and Quantum Cryptography) for medical devices and that will be impacted by cybersecurity. Make internal and external policy recommendations to mitigate threats and vulnerabilities. Provide technical leadership supporting cyber architecture, penetration testing approaches, advanced real-world security testing methodologies, and risk-based validation strategies. Drive integration of security tooling