[Skip to main content](#main-content)

[ OpenNash ](https://opennash.com/) / [Jobs](https://jobs.opennash.com/) [ 01 Search jobs](https://jobs.opennash.com/search/)[ 02 Companies](https://jobs.opennash.com/explore/)[ 03 Hiring report](https://jobs.opennash.com/reports/hiring/)[ 04 AI assistants](https://jobs.opennash.com/connect/)[ 05 How it works](https://jobs.opennash.com/methodology/)

Johnson & Johnson

# Cyber Security Risk Index Specialist (Fixed Term Contract)

São José dos Campos, São Paulo, Brazil +1 more Full-time Security 

Listed on Johnson & Johnson’s official careers site. Posted October 26, 2026. Check that it is still open and apply there.
[Apply on Johnson & Johnson’s careers site →](https://jj.wd5.myworkdayjobs.com/JJ/job/So-Jos-dos-Campos-So-Paulo-Brazil/Cyber-Security-Risk-Index-Specialist--Fixed-Term-Contract-_R-106841)

[OpenNash Jobs](https://jobs.opennash.com/) / [Johnson & Johnson](https://jobs.opennash.com/companies/johnson-johnson/) / Cyber Security Risk Index Specialist (Fixed Term Contract)

## Job description

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.

Learn more at jnj.com. As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

### Job Function

Project/Program Management Group Job Sub Function: Project/Program Management Job Category: Professional All Job Posting Locations: São José dos Campos, São Paulo, Brazil, São Paulo, Brazil Job Description: The CSRI Specialist is responsible for supporting the Cyber Security Risk Index (CSRI) program through assisting site and BIS teams with loading inventories, data governance, reporting support, training development, and framework alignment.

The role serves as a key liaison between site teams, ISRM BIS, OT Security Services, and the Metrics & Reporting team to ensure CSRI data is accurate, complete, and effectively translated into actionable cyber risk insights. The successful candidate will manage inventory onboarding activities, maintain underlying CSRI data structures, support dashboard and reporting enhancements, develop user training materials, and ensure continued alignment with cybersecurity frameworks including NIST CSF and NIST SP 800-82.

### Key Responsibilities

CSRI Inventory & Data Management Support loading of site inventory and checklists into the CSRI process. Review and validate inventory data before import into Asset Management. Support maintenance of risk scenario mappings, site controls data, and supporting reference data. Ensure data quality standards are maintained across inventories, questionnaires, and reporting systems Training & Communications Develop and maintain CSRI training materials, user guides, process documentation, and awareness presentations.

Deliver training sessions to site personnel, BIS teams, and other stakeholders. Support communication of CSRI process changes, releases, and framework updates. Create knowledge articles, FAQs, and onboarding packages for new users. Assist with change management activities associated with CSRI releases and process improvements. Metrics & Reporting Support Partner with the Metrics & Reporting team to maintain and improve CSRI dashboards and reporting capabilities.

Assist in defining reporting requirements and validating reporting outputs. Support dashboard testing, data validation, and enhancement activities. Analyze CSRI maturity data, risk scenario outputs, and trends. Produce executive summaries, scorecards, and management reports. Framework & Methodology Management Maintain understanding of CSRI methodology, scoring logic, and maturity calculations. Support mapping between CSRI controls, NIST CSF, NIST SP 800-82 low overlay, and related security frameworks.

Assist with updates required for framework revisions and CSRI releases. Help identify opportunities to improve scoring models, control mappings, and risk measurements. Support governance activities related to CSRI standards and process documentation. Stakeholder Engagement Act as a primary point of contact for site teams regarding CSRI data collection and reporting activities. Work closely with ISRM teams, OT Security Services, Asset Management teams, and Metrics & Reporting.

Facilitate issue resolution related to inventory quality, reporting discrepancies, and process questions. Support workshops and working sessions to improve CSRI adoption and maturity.

### Required Qualifications

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Data Analytics, or related field. 3-5 years of experience in cybersecurity, governance, risk management, data management, or reporting roles. Advanced English Experience working with large datasets, data validation, and reporting platforms. Strong proficiency with Microsoft Excel, Power BI, SharePoint, and Microsoft 365 applications. Experience developing training and user enablement materials.

Strong organizational and stakeholder management skills.

### Preferred Qualifications

Understanding of Operational Technology (OT) environments.

Familiarity with cybersecurity frameworks such as: NIST Cybersecurity Framework (CSF) NIST SP 800-82 NIST SP 800-53 ISA/IEC 62443 Experience with ServiceNow Asset Management or similar inventory management platforms would be beneficial. Experience supporting cybersecurity metrics, maturity assessments, or risk programs.

### Key Competencies

Data quality management Reporting and analytics
- Process governance Stakeholder engagement Technical documentation Training delivery Cybersecurity framework interpretation Attention to detail Continuous improvement mindset
- Strong written and verbal communication skills Success
- Measures Accurate and timely onboarding of site inventories.

High data quality and reduced inventory rework. Effective training delivery and stakeholder adoption. Timely support for dashboard and reporting enhancements. Successful implementation of CSRI process and framework updates. Improved visibility of cybersecurity maturity and risk trends across the organization.

### Required Skills

Preferred Skills: Agility Jumps, Analytics Insights, Business Alignment, Business Behavior, Collaboration Tools, Communication, Cost-Benefit Analysis (CBA), Data Analysis, Monitoring, Evaluation, and Learning (MEL), Problem Solving, Process Oriented, Project Management Methodology (PMM), Project Management Office (PMO), Project Reporting, Project Support, Statement of Work (SOW), Time Management

## At a glance
- Posted by the employer: Oct 26, 2026
- First seen by OpenNash: Nov 1, 2026
- Last checked: Nov 1, 2026
- Listed for: 6 days
- Location: São José dos Campos, São Paulo, Brazil +1 more
- Employment type: Full-time[Apply on Johnson & Johnson’s careers site →](https://jj.wd5.myworkdayjobs.com/JJ/job/So-Jos-dos-Campos-So-Paulo-Brazil/Cyber-Security-Risk-Index-Specialist--Fixed-Term-Contract-_R-106841)

## Hiring at Johnson & Johnson
- Open jobs: 1,698
- New in the last 7 days: After two weekly collections
- Tracked since: Jul 10, 2026

[All Johnson & Johnson jobs](https://jobs.opennash.com/companies/johnson-johnson/) · [Weekly hiring report](/reports/hiring/)

## More jobs at Johnson & Johnson

### [OT Cyber Security Service Owner - USB & End Point (Fixed Term Contract)](https://jobs.opennash.com/companies/johnson-johnson/jobs/08759afe6a32de8412d9/)

São José dos Campos, São Paulo, Brazil +1 more

### [Exp, Analyst, Security Engineer Product](https://jobs.opennash.com/companies/johnson-johnson/jobs/c13795effd59a85e974b/)

### [Senior Manager, A&D Security Operations](https://jobs.opennash.com/companies/johnson-johnson/jobs/d0becd262d135f95ac0a/)

Raritan, New Jersey, United States of America +49 more

### [Senior Manager, Pre-Close Security](https://jobs.opennash.com/companies/johnson-johnson/jobs/e4d6552e45751aba3306/)

Raritan, New Jersey, United States of America +50 more

### [(Senior) Learning & Development Manager](https://jobs.opennash.com/companies/johnson-johnson/jobs/2f68bbbfc82a1eaa48a3/)

Beijing, China

## Similar jobs at other companies

### [- Cyber Security Risk Specialist (m/f/d)](https://jobs.opennash.com/companies/basf/jobs/ac2c57bc21a92e1d44ce/)

BASF · ${htmlLocations}

### [Security Architect - Cyber Security](https://jobs.opennash.com/companies/vodafone/jobs/769d1e41f2fb108d4b71/)

Vodafone · Dublin, Ireland

### [Cyber Risk Analyst/Consultant](https://jobs.opennash.com/companies/accenture/jobs/2c0e99ea4b58d2a7b7a9/)

Accenture 

### [Cyber Security Specialist](https://jobs.opennash.com/companies/vodafone/jobs/b9ed855256886508231f/)

Vodafone · LISBOA, Portugal

### [Cyber and Technology Risk and Controls Lead, Malaysia](https://jobs.opennash.com/companies/jpmorganchase/jobs/9c7fb92c75225df581bd/)

JPMorganChase · Malaysia

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

[ OpenNash ](https://opennash.com/)

AI-native services firm that builds custom software and 24/7 AI agents.

OpenNash Jobs is an OpenNash Applied AI project.
[Book time with OpenNash](https://calendly.com/opennash/new-meeting?hide_gdpr_banner=1)

Jobs
- [Search jobs](https://jobs.opennash.com/search/)
- [Companies](https://jobs.opennash.com/explore/)
- [Hiring report](https://jobs.opennash.com/reports/hiring/)
- [AI assistants](https://jobs.opennash.com/connect/)
- [How it works](https://jobs.opennash.com/methodology/)

OpenNash
- [opennash.com](https://opennash.com/)
- [Services](https://opennash.com/ai-agent-consulting/)
- [OpenNash CX](https://opennash.com/cx/)
- [AI Tools](https://opennash.com/ai-tools/)
- [Blog](https://opennash.com/blog/)
- [About](https://opennash.com/about/)

Contact
- [hello@opennash.com](mailto:hello@opennash.com)

- [LinkedIn](https://www.linkedin.com/company/opennash)

- [Support](https://jobs.opennash.com/support/)

- [Privacy](https://jobs.opennash.com/privacy/)

- [Terms](https://jobs.opennash.com/terms/)

© 2026 OpenNash, Inc. Company names and public job postings belong to their respective owners. Employers control source availability and application decisions.