Technology Manager, Infrastructure Security Engineering - (Job Number: 0805008)

Technology Manager, Infrastructure Security Engineering - (Job Number: 0805008) DescriptionJohnson & Johnson Networking & Computing Services, a member of Johnson & Johnson's Family of Companies, is seeking a Technology Manager, Infrastructure Security Engineering. The position will be located in Raritan, New Jersey. The Technology Manager, Infrastructure Security Engineering primary responsibilities: Senior-level engineering position responsible for: Development of security related infrastructure technology solutions IT infrastructure project security consultation. Computing Platform, Software Platform, and Network security configuration review and remediation. Ensuring that J&J information assets are appropriately identified and valued, and are protected by complying with and enforcing all local and worldwide security policies. Ensuring that security is considered and emphasized in all IT services and standards. The focus area for this position is Server and Storage Security engineering. The position will be responsible for security engineering pertaining to servers and storage systems on the corporate network or otherwise used to support corporate business functions. Technologies include servers running Windows, UNIX, and Linux operating systems; infrastructure applications & software platforms (eg: domain controllers, Active Directory, IIS, SharePoint, Exchange, SQL, etc); and storage platforms, including managed and unmanaged storage technologies and standards. Lead engineering efforts around the evaluation, standardization, monitoring and management, and planning of current and future IT security technologies. Represent all area of team to internal and external sources. Develop detailed design documents for projects, services, and solutions developed by team. Additional responsibilities include: Provide oversight and guidance to ensure compliance with the Johnson & Johnson Information Asset Protection Policies (IAPPs) for all ITS services and solutions. Provide authoritative interpretations of the IAPPs and answer questions from other parts of ITS concerning the IAPPs and any World Wide Information Security (WWIS) prescribed requirements. Identify and prioritize projects, products, policies, and activities to improve the overall. Information Technology security posture for assets, systems, and services used directly or indirectly in support of the corporation's business functions. Provide mentoring and coaching to junior team members. Provide input to performance evaluation and development planning for junior team members. Provide technical leadership to junior team members. Develop strong partnership with the technology vendors to ensure that changes to the technologies are communicated in a timely manner and that new releases are made available for early testing. This position may require occasional international travel based on business needs. A minimum of 4-year degree or equivalent required, preferably in Computer Information Systems or Computer Sciences (or equivalent) is required. A minimum of 4 years of experience in information security is required. A minimum 6 years of experience in Information Technology engineering disciplines is preferred. A minimum of 3 years or more experience with key project roles on large enterprise technology development projects is required. Strong understanding of key security issues and control mechanisms to protect internal systems and manage legal exposure related to subject area concerns, such as configuration management & assurance, instrumentation & monitoring, policy enforcement, and compliance. Extensive engineering and operational experience with infrastructure security technologies. Experience presenting complex technical matters to executive-level personnel.Certification in at least one Information Security certification program, such as: Certified Information Systems Auditor (CISA). Certified Information Systems Security Professional (CISSP). Certified Information Security Manager (CISM). SANS-GIAC certifications. System Security Certified Practitioner (SSCP). Cisco Certified Security Professional (CCSP) Preferred qualifications: Knowledge of US and overseas requirements pertaining to medical regulation and the protection of privacy information. Experience performing and/or responding to internal and external audits, including security audits, penetration testing, SOX audits, etc. Current knowledge of the IT security product/vendor/services landscape. Experience developing and implementing both short-term and long-term strategic programs focused on providing observable, measurable improvements to end users, operational counterparts, and business partners. Apply Now