> Markdown version of [/jobs/ext/2295861-director-software-quality-engineering-cybersecurity](https://www.wearedevelopers.com/jobs/ext/2295861-director-software-quality-engineering-cybersecurity). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director Software Quality Engineering & Cybersecurity - **Company:** Johnson & Johnson - **Location:** Santa Clara, CA, United States - **Experience:** Expert - **Salary:** $172,000.0 - $297,850.0 - **Contract:** Permanent contract - **Skills:** Agile Methodology, Artificial Intelligence, Application Lifecycle Management, Software System Penetration Testing, Systems Engineering, Configuration Management, Software Quality, Cyber Security, Data Systems, DevOps, Digital Technology, EHealth, Embedded Software, Software Product Management, Software Tools, Software Engineering, Software Requirements Analysis, Software Vulnerability Management, Information Technology, Mdsap, GXP, Vulnerability Analysis - **Published:** August 29, 2026 - **Apply:** https://www.techcareers.com/job.asp?id=3369522929&tx=KK8383FFR&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role * Bachelor's degree in engineering, Computer Science, Software Engineering, Biomedical engineering, or related technical field is required. Advanced degree is preferred. * A minimum of 12 years of experience in medical devices, software-regulated, or highly regulated industries. * A minimum of 7 years of leadership experience managing software quality or software engineering teams. * Strong knowledge of IEC 62304, ISO 14971, ISO 13485, FDA QSR/QMSR, and FDA cybersecurity guidance. * Hands-on experience with AI/ML-enabled device development, software lifecycle management, and digital health quality integration. * Experience with software risk management, cybersecurity governance, and software development lifecycle processes. * In depth knowledge of SPDF, threat modeling, SBOM management, and vulnerability assessment processes. * Experience with Agile software development environments and DevOps methodologies. * Experience supporting FDA submissions, inspections, and regulatory audits. * On-site attendance at Johnson and Johnson robotic campus in Santa Clara, CA facility is required for at least 3 days a week., Business Planning, Change Management, Coaching, Cybersecurity, Design Controls, Fact-Based Decision Making, FDA Submissions, Give Feedback, IEC 62304, Inclusive Leadership, Leadership, Process Improvements, Risk Management Software, Science, Technology, Engineering, and Math (STEM) Application, Technical Software ## Description The Director leads the quality engineering strategy and execution for software-enabled medical technologies across the OTTAVA robotic surgical platform. This leader oversees software quality engineering activities supporting software in medical device including AI/ML components, Software as a Medical Device (SaMD), Medical Device Data Systems (MDDS), embedded software, connected digital systems, non-product software validation, and cybersecurity compliance. This role partners closely with R&D, Regulatory Affairs, Medical Safety, Systems Engineering, Clinical, and enterprise cybersecurity teams to ensure software products and supporting systems meet global regulatory requirements, cybersecurity expectations, and company quality standards throughout the product lifecycle. The Director establishes scalable quality systems, drive software development and validation excellence, supports regulatory submissions and inspections, and enable safe and compliant product commercialization., * Lead the Software Quality Engineering function supporting the OTTAVA robotic surgical platform and associated digital technologies. * Establish and execute software quality strategies aligned with FDA, ISO 13485, IEC 62304, ISO 14971, FDA cybersecurity guidance, and applicable global regulations. * Provide oversight of software design controls, software lifecycle processes, software risk management, anomaly management, configuration management, and release readiness activities. * Ensure robust traceability between software requirements, hazards, mitigations, verification, validation, and cybersecurity controls. * Lead quality and compliance activities for Software as a Medical Device (SaMD) and Medical Device Data Systems (MDDS). * Partner with Regulatory Affairs to support regulatory submissions, FDA interactions, technical documentation, and cybersecurity deliverables. * Ensure software classification, intended use, and regulatory positioning are appropriately documented and maintained. * Lead quality oversight for product cybersecurity activities across the software development lifecycle. * Partner with enterprise cybersecurity and product security teams to ensure implementation of Secure Product Development Framework (SPDF) practices. * Oversee cybersecurity risk management, vulnerability management, penetration testing assessments, SBOM governance, threat modeling, and post-market cybersecurity processes. * Ensure cybersecurity activities are integrated into CAPA, complaint handling, supplier controls, and change management systems. * Support regulatory responses related to cybersecurity and software assurance. * Establish and maintain compliant validation programs for non-product software used in development, testing, manufacturing, quality systems, and operations. * Ensure validation approaches are risk-based, scalable, and inspection-ready. * Oversee governance for software tools supporting regulated activities, including lifecycle management and change control. * Partner with R&D and Systems Engineering to support new product development, sustaining engineering, design changes, and software releases. * Participate in risk management activities, design reviews, verification/validation reviews, and failure investigations. * Ensure software quality considerations are integrated into design transfer and launch readiness activities. * Develop and maintain procedures, standards, and governance models supporting software quality and cybersecurity compliance. * Ensure inspection readiness for FDA, notified body, and internal audits. * Lead software quality metrics, trend analysis, and continuous improvement initiatives. * Support investigations, CAPAs, complaints, and field actions involving software or cybersecurity-related issues * Build and develop a high-performing Software QE organization. * Provide coaching, mentorship, and career development for managers and engineers. * Foster a culture of accountability, technical excellence, collaboration, and proactive risk management. * Drive clarity of ownership and effective cross-functional decision-making * Leads with technical credibility and executive presence, inspiring confidence across engineering, operations, and executive teams. * Comprehensive understanding of Design Controls, Design Verification and Validation, and Design Transfer processes for medical devices. * Proficiency with 21 CFR Part 820, ISO 13485, ISO 14971, IEC 62304, and EU MDR compliance frameworks. * Proven success supporting FDA inspections, ISO certification audits, and MDSAP assessments with strong command of global regulatory requirements. ## Related Videos - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [More efficient software for more efficient microchips](https://www.wearedevelopers.com/videos/1164-more-efficient-software-for-more-efficient-microchips) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) ## Related Articles - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [What is Software Engineering?](https://www.wearedevelopers.com/magazine/289-what-is-software-engineering) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The Ultimate Software Engineer Career Path Guide for 2023](https://www.wearedevelopers.com/magazine/146-the-ultimate-software-engineer-career-path-guide-for-2023) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)