OT Cyber Security Service Owner - USB & End Point (Fixed Term Contract)

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com .

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Project/Program Management Group

Job Sub Function:

Project/Program Management

Job Category:

Professional

All Job Posting Locations:

São José dos Campos, São Paulo, Brazil, São Paulo, Brazil

Job Description:

Role Purpose

The OT Service Owner is responsible for establishing, operating, governing, and continuously improving end-to-end OT cybersecurity services, including USB/removable-media security and endpoint protection. The role provides service-level accountability across these capabilities, rather than focusing on a single technology or vendor.

The role will transition OT protection capabilities from deployment-focused activities into sustainable, measurable and supportable global services. The Service Owner acts as the central coordination point across Service Operations, OT Security Engineering, SOC, site cybersecurity teams, Quality/Compliance, vendors and other technology stakeholders, ensuring that USB security and endpoint protection are managed through a consistent service framework.

The Service Owner is accountable for ensuring that technology components, operational processes and organizational responsibilities function as integrated services from request through operation, monitoring, incident response, change, lifecycle management and continuous improvement, while respecting OT availability, compatibility and site operational requirements.

Key Responsibilities

End-to-End Service Ownership

Lead the operational model for OT cybersecurity services, including USB/removable-media security and endpoint protection, across the complete lifecycle.

Establish clear accountability between Service Operations, Engineering, SOC, site teams, Quality/Compliance and other supporting functions.

Define and maintain service boundaries, responsibilities, blocking issue and operational.

Drive the transition from project/deployment activities into sustainable services with defined operational readiness and support acceptance criteria.

Ensure new site, endpoint and removable-media protection demand is handled through a defined intake, prioritization and onboarding process.

Own and mature the operational support model, including service health monitoring, protection coverage, update coordination and lifecycle support across endpoint and removable-media security platforms.

Act as the service-level coordination point for endpoint and removable-media security detections and operational incidents, working with SOC, Engineering and site teams on response and service restoration.

Establish and operate a consistent governance structure across OT protection services, including service reviews, risk and exception tracking, and blocking issue of coverage or support gaps.

Lead the service important metric and management-information framework, covering service availability, endpoint and removable-media protection coverage, platform health, incident trends and operational adoption.

Partner with OT sites to ensure protection capabilities are not only deployed but operationally embraced and supported within local production and maintenance processes.

Ensure that the operational doc