Senior Manager- GRC Process and Controls

Johnson & Johnson is recruiting for a Senior Manager, GRC Process & Controls located in Raritan, NJ or Beerse, Belgium.

The Sr. Manager, GRC Process & Controls, will be responsible for developing, maintaining and continuously enhancing GRC and assessment processes, ensuring GRC cyber policies and processes are in alignment with industry standard control frameworks, and identifying automation opportunities across the cyber risk management function. They will collaborate with other GRC and risk management leaders, security assessment team leaders, the security architecture and innovation team and ISRM BIS teams in performance of their responsibilities.

Key Responsibilities:

• Lead the maintenance and enhancement of a controls framework, in alignment with industry standards, and support response to audits and inquiries.


• Oversee and/or maintain controls mapping between internal security policies and controls frameworks.


• Monitor changes in laws, regulations, and standards to understand impact to controls and compliance.


• Collaborate with internal security teams to ensure the broader processes and operating procedures are in alignment with the controls framework.


• Develop, maintain, and continuously enhance GRC processes.


• Identify and drive opportunities for automated verification of controls, both during initial assessment and on an ongoing basis.


• Define requirements for the GRC tool to support the controls framework and assessments and partner with the GRC Solutions team on implementation.


• Collaborate with the SDLC and Asset Management teams to ensure alignment with the defined controls framework and assessments.


• Support special projects in the GRC and Risk Management space.