CISO Spotlight: Marene Allison, Johnson & Johnson

Listen to full interview here https://www.govinfosecurity.com/ciso-spotlight-marene-allison-johnson-johnson-a-16647
Reflections on Seismic Change in 2020 and Opportunities in the Year Ahead
RSA Conference Studios interview by Tom Field, Senior VP – Editorial ISMG – GovInfoSecurity.com
As CISO of Johnson & Johnson, Marene Allison was used to gauging her security posture by the top threat activity: nation-state, cybercrime, insider or hacktivist. But in 2020, they all struck at once. Here is one CISO’s take on the state of the industry.
In a video interview with Information Security Media Group as part of its RSA Conference 2021 coverage, Allison discusses:
- ~ Her unique career path;
- ~ How Johnson & Johnson has changed after the pandemic year;
- ~ How these changes influence her cybersecurity priorities going forward.
As chief information security officer for Johnson & Johnson, Allison is responsible for protecting the company’s information technology systems and business data worldwide. This includes ensuring that the company’s information security posture supports business growth objectives, protects public trust in the Johnson & Johnson brand and meets legal/regulatory requirements. She has held corporate roles at Medco, Avaya and The Great Atlantic and Pacific Tea Company; served as an FBI special agent and in the U.S. Army; and graduated from West Point in the first class to include women. She is on the boards of H-ISAC, West Point Women and ASIS International.
- Related Resources & News
- Health Care and Social Assistance Threat Landscape Report
- Agentic AI in Healthcare Is a Risky Proposition
- Live@eXchange Day 2 – Health-ISAC Medical Device Security Analyst
- Health-ISAC Hacking Healthcare 6-3-2026
- New Vulnerabilities Aimed at Healthcare Industry
- Monthly Newsletter – June 2026
- What it really takes to Secure Healthcare
- Device Inventory and PHI Mapping Will Be the Heaviest Lifts When New HIPAA Drops
- Verizon DBIR: Healthcare Fends Off Increased Social Engineering Attacks
- State of Human Cyber Risk Report
