Sr. Program Manager, Cyber Strategy & PMO

The Sr. Program Manager, Cyber Strategy & PMO is a senior cybersecurity leadership role responsible for shaping and driving the strategic direction, governance, and operational discipline of DePuy Synthes' global cybersecurity function. This leader will own the cyber strategy and transformation agenda, portfolio and program governance, and the operating model that enables the cybersecurity organization to deliver at scale. The role plays a critical part in aligning cyber investments to enterprise priorities, ensuring transparent executive reporting, and building the PMO capabilities needed to safeguard patient trust, business continuity, and regulatory compliance. This position reports into the DePuy Synthes Technology organization. 

Key Responsibilities 

• Support the development and lead execution of the enterprise Cyber Strategy & Transformation roadmap, translating business priorities and threat landscape shifts into a multi‑year plan for the cybersecurity function. 

• Own Portfolio & Program Governance across the cybersecurity organization, ensuring initiatives are prioritized, sequenced, and delivered against defined outcomes, budgets, and timelines. 

• Drive Executive Reporting & Governance by producing CIO, CISO-ready materials that clearly communicate cyber posture, program health, risks, and value delivered. 

• Direct Financial & Resource Management for the cybersecurity function, including annual budget planning, forecasting, variance analysis, vendor spend, and workforce/resource allocation. 

• Build and mature the cybersecurity Operating Model & PMO Excellence, establishing standards, playbooks, tools, and cadences that enable consistent, high‑quality delivery across teams and geographies. 

• Lead Stakeholder Alignment across IT, Legal, Privacy, Quality, Finance, HR, and Business leaders, ensuring cyber priorities are understood, funded, and embedded into enterprise decision‑making. 

• Partner with cybersecurity domain leaders (e.g., Incident Response & Threat, Identity, Product Security) to align strategy, roadmaps, and governance across the function. 

• Lead, mentor, and develop a high‑performing cyber strategy and PMO team, including program managers and analysts across US and India locations. 

• Drive continuous improvement of PMO tools, processes, KPIs, and reporting to increase transparency, efficiency, and the strategic impact of the cybersecurity organization. 

Qualifications 

Education: 

• Bachelor's degree in Computer Science, Information Security, Business, Engineering, or a related field (required). 

• Master's degree in Cybersecurity, Information Systems, or Business Administration (preferred). 

Experience and Skills: 

Required: 

• 10-12 years of progressive experience in cybersecurity strategy, technology PMO, program/portfolio management, or IT risk management, including people leadership roles. 

• Proven experience building and running a cyber or technology PMO, including portfolio governance, executive reporting, and financial management. 

• Demonstrated ability to develop and communicate multi‑year strategy and transformation roadmaps for cybersecurity or broader technology functions. 

• Understanding of the cybersecurity domains, and how they connect to enterprise risk and business outcomes. 

• Experience working in regulated environments (e.g., healthcare, life sciences, MedTech, or similarly regulated industries). 

• Excellent executive communication, storytelling, and stakeholder management skills, with a track record of influencing senior leaders. 

Preferred: 

• Experience supporting global organizations with complex technology environments and distributed delivery models (including GCC/offshore). 

• Familiarity with security and control frameworks such as NIST CSF, ISO 27001, or similar standards. 

• Experience leading cyber programs through large‑scale transformations (e.g., separations, M&A, ERP or cloud modernization). 

• Prior experience managing budgets of meaningful scale, including vendor and workforce spend. 

• Certifications such as PMP, PgMP, SAFe, CISM, CISSP, or equivalent. 

Other: 

• Language: English (fluent). 

• Travel: Up to 10–15%, primarily domestic with occasional international travel. 

• Certifications (preferred): CISSP, CISM, GIAC, or equivalent cybersecurity certifications. 

For more information on how we support the whole health of our employees throughout their wellness, career and life journey, please visit www.careers.jnj.com.