CISO Spotlight: Marene Allison, Johnson & Johnson

Listen to full interview here https://www.govinfosecurity.com/ciso-spotlight-marene-allison-johnson-johnson-a-16647
Reflections on Seismic Change in 2020 and Opportunities in the Year Ahead
RSA Conference Studios interview by Tom Field, Senior VP – Editorial ISMG – GovInfoSecurity.com
As CISO of Johnson & Johnson, Marene Allison was used to gauging her security posture by the top threat activity: nation-state, cybercrime, insider or hacktivist. But in 2020, they all struck at once. Here is one CISO’s take on the state of the industry.
In a video interview with Information Security Media Group as part of its RSA Conference 2021 coverage, Allison discusses:
- ~ Her unique career path;
- ~ How Johnson & Johnson has changed after the pandemic year;
- ~ How these changes influence her cybersecurity priorities going forward.
As chief information security officer for Johnson & Johnson, Allison is responsible for protecting the company’s information technology systems and business data worldwide. This includes ensuring that the company’s information security posture supports business growth objectives, protects public trust in the Johnson & Johnson brand and meets legal/regulatory requirements. She has held corporate roles at Medco, Avaya and The Great Atlantic and Pacific Tea Company; served as an FBI special agent and in the U.S. Army; and graduated from West Point in the first class to include women. She is on the boards of H-ISAC, West Point Women and ASIS International.
- Related Resources & News
- Healthcare Heartbeat 2024 Q4
- Health-ISAC Hacking Healthcare 2-19-2025
- Podcast: Reflecting on the Change Healthcare cyberattack
- Senate Confirms Trump Pick RFK Jr. to Lead HHS
- The Alarming Backdoor Hiding in 2 Chinese Patient Monitors
- Health-ISAC 2025 Health Sector Cyber Threat Landscape
- How Health Systems Manage Security in the Cloud
- Change Healthcare Attack a Wake-up Call for the Industry
- Five High-Impact Cyberattacks Healthcare Industry Should Avoid in 2025
- Health-ISAC Hacking Healthcare 2-11-2025