Senior Legal Director, Cyber & Data Risk

Johnson & Johnson

Senior Legal Director advising Johnson & Johnson’s healthcare technology organization on cybersecurity, AI, data, and technology risk. Leading incident response counsel, governance, agreements, and a cybersecurity legal team.

Posted 8/5/2026full-timeNew Brunswick • New Jersey • 🇺🇸 United StatesSenior💰 $178,000 - $307,050 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive legal expertise in cybersecurity, data protection, and technology regulation, with a strong ability to advise executive leadership on complex legal issues and shape governance frameworks. Proven experience in leading legal support during significant cybersecurity incidents and influencing decision-making in global organizations.

Highest-signal resume keywords

Juris Doctor (JD) DegreeCybersecurity Legal ExperienceExecutive Communication SkillsLeadership and People ManagementGlobal Cybersecurity Regulatory Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Legal AdvisoryData Protection RegulationsTechnology Risk ManagementContract Drafting and NegotiationGovernance Framework DevelopmentCrisis Response ManagementMergers and Acquisitions Legal SupportRegulatory ComplianceInformation GovernanceAI Governance

Soft Skills

CollaborationStakeholder ManagementInfluencing Decision-MakingDigital FluencyExecutive Leadership

Certifications & Qualifications

Admission to Practice Law

Industry Keywords

CybersecurityCritical InfrastructureData RiskEmerging RisksTechnology RegulationInformation Protection StrategiesCross-Border Data FlowsCyber CommunicationsRegulatory InquiriesLaw-Firm Experience

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Serve as principal legal advisor to the CISO, ISRM Leadership Team, and enterprise technology leaders
Advise executive leadership on cybersecurity strategy, technology risk, data risk, emerging risks, and regulatory requirements
Embed legal guidance into strategic technology initiatives and operational decision-making
Advise on cyber and data risk implications of AI, cloud, enterprise platforms, and digital capabilities
Develop governance frameworks, policies, and controls aligned with global legal and regulatory requirements
Interpret cybersecurity, AI, critical infrastructure, and technology regulations into practical business guidance
Monitor emerging legal and regulatory developments with Government Affairs, Privacy, and other stakeholders
Lead legal support for significant cybersecurity incidents, vulnerabilities, crisis response, investigations, and regulatory matters
Advise on cyber communications, SEC and regulatory disclosures, law-enforcement interactions, asset protection, insider risk, and data theft
Advise on enterprise data protection, information governance, cross-border data flows, and information protection strategies
Advise on cybersecurity and product-security provisions in technology agreements
Counsel on technology legal risks related to M&A, divestitures, partnerships, sourcing, and other technology initiatives
Manage outside counsel on specialized cybersecurity legal matters
Collaborate across the Technology Advisory Legal team, Legal, Enterprise Technology, Privacy, and business functions
Lead and develop cybersecurity legal professionals
Shape legal capabilities, governance approaches, and best practices for the company’s technology strategy

Requirements

What you’ll need

Juris Doctor (JD) degree required
Admission to practice law and good standing in at least one United States jurisdiction required
Minimum 12 years of relevant legal experience, including significant cybersecurity legal experience
Experience advising senior executives on complex, business-critical cybersecurity issues
Experience leading legal support during significant cybersecurity incidents, investigations, regulatory inquiries, or crises
Deep knowledge of global cybersecurity legal and regulatory frameworks, including data protection, critical infrastructure, technology regulation, and AI governance
Experience drafting and negotiating cybersecurity, technology, and product-security contractual provisions
Experience advising on cybersecurity legal risks associated with mergers, acquisitions, divestitures, and strategic technology initiatives
Ability to shape enterprise governance programs and influence decision-making in complex global matrix organizations
Strong leadership and people-management experience
Executive communication, collaboration, and stakeholder-management skills
Digital fluency and ability to learn new technology
Ability to travel approximately 10%
Law-firm experience supporting cybersecurity investigations, enforcement actions, or regulatory matters preferred
In-house experience supporting a global organization preferred

Benefits

Comp & perks

Consolidated retirement plan (pension)
Savings plan (401(k))
Long-term incentive program
Vacation – 120 hours per calendar year
Sick time – 40 hours per calendar year
Holiday pay, including Floating Holidays – 13 days per calendar year
Work, Personal and Family Time – up to 40 hours per calendar year
Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year
Caregiver Leave – 80 hours in a 52-week rolling period
Volunteer Leave – 32 hours per calendar year
Military Spouse Time-Off – 80 hours per calendar year
Inclusive interview process and disability accommodations