OT Cyber Security Service Owner - USB & End Point (Fixed Term Contract)

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com .

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Project/Program Management Group

Job Sub Function:

Project/Program Management

Job Category:

Professional

All Job Posting Locations:

São José dos Campos, São Paulo, Brazil, São Paulo, Brazil

Job Description:

Role Purpose

The OT Service Owner is responsible for establishing, operating, governing, and continuously improving end-to-end OT cybersecurity services, including USB/removable-media security and endpoint protection. The role provides service-level accountability across these capabilities, rather than focusing on a single technology or vendor.

The role will transition OT protection capabilities from deployment-focused activities into sustainable, measurable and supportable global services. The Service Owner acts as the central coordination point across Service Operations, OT Security Engineering, SOC, site cybersecurity teams, Quality/Compliance, vendors and other technology stakeholders, ensuring that USB security and endpoint protection are managed through a consistent service framework.

The Service Owner is accountable for ensuring that technology components, operational processes and organizational responsibilities function as integrated services from request through operation, monitoring, incident response, change, lifecycle management and continuous improvement, while respecting OT availability, compatibility and site operational requirements.

Key Responsibilities

End-to-End Service Ownership

Lead the operational model for OT cybersecurity services, including USB/removable-media security and endpoint protection, across the complete lifecycle.

Establish clear accountability between Service Operations, Engineering, SOC, site teams, Quality/Compliance and other supporting functions.

Define and maintain service boundaries, responsibilities, blocking issue and operational.

Drive the transition from project/deployment activities into sustainable services with defined operational readiness and support acceptance criteria.

Ensure new site, endpoint and removable-media protection demand is handled through a defined intake, prioritization and onboarding process.

Own and mature the operational support model, including service health monitoring, protection coverage, update coordination and lifecycle support across endpoint and removable-media security platforms.

Act as the service-level coordination point for endpoint and removable-media security detections and operational incidents, working with SOC, Engineering and site teams on response and service restoration.

Establish and operate a consistent governance structure across OT protection services, including service reviews, risk and exception tracking, and blocking issue of coverage or support gaps.

Lead the service important metric and management-information framework, covering service availability, endpoint and removable-media protection coverage, platform health, incident trends and operational adoption.

Partner with OT sites to ensure protection capabilities are not only deployed but operationally embraced and supported within local production and maintenance processes.

Ensure that the operational documentation required to run the service is defined, maintained and integrated.

Coordinate the service with Quality, Compliance and cybersecurity-control requirements.

Ensure OT protection services are correctly represented within the enterprise service-management ecosystem, including service catalog entries, configuration records, support groups and service dependencies.

Work closely with OT Security Engineering while maintaining a deliberate separation between service ownership and engineering ownership.

Support the evolution of OT protection services across endpoint and removable-media security, aligning service improvements with site needs, technology roadmaps and operational constraints.

Required Qualifications

Essential

Bachelor’s degree in information technology, Cybersecurity, Engineering, or related field.

3-5 years of experience in IT/OT Service Management, Cybersecurity Operations, Infrastructure Services or OT Security.

Advanced English

Solid understanding of end-to-end service ownership operating models, with working knowledge of endpoint protection and USB/removable-media security in OT environments.

Practical experience with ITIL-aligned Incident, Problem, Change, Request and Configuration Management.

Ability to coordinate technical engineering and operational teams.

Experience working across global and site-based organizations.

Strong stakeholder and vendor-management capabilities.

Ability to translate technical issues into operational and business impact.

Experience developing important metrics, service dashboards and operational reporting.

Understanding of cybersecurity incident-response processes.

Strong process/documentation discipline.

 

Highly Desirable

Experience supporting industrial/manufacturing or R&D OT environments.

Experience with endpoint protection and removable-media security platforms; familiarity with OPSWAT or comparable solutions is an advantage.

ServiceNow/ITSM and CMDB experience.

Experience supporting endpoint security in air-gapped, legacy or operationally constrained OT environments.

Knowledge of GxP / regulated environments and Quality processes.

Key Competencies

End-to-End Service Ownership

IT/OT Service Management

OT Cybersecurity & Risk Management

Cybersecurity Operations & Incident Management

Service Design & Operational Readiness

Governance, Metrics & Performance Management

Stakeholder & Vendor Management

Process Development & Continuous Improvement

Communication & Cross-Functional Leadership

Required Skills:

Preferred Skills:

Agility Jumps, Analytics Insights, Business Alignment, Coaching, Communication, Cost-Benefit Analysis (CBA), Cross-Functional Collaboration, Monitoring, Evaluation, and Learning (MEL), Persistence and Tenacity, Problem Solving, Process Oriented, Project Management Methodology (PMM), Project Management Office (PMO), Project Management Tools, Project Reporting, Statement of Work (SOW)