Senior Technology Auditor, GA&A (1 of 2)

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world.  We provide an inclusive work environment where each person is considered as an individual.  At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Finance

Job Sub Function:

Internal Audit

Job Category:

Professional

All Job Posting Locations:

New Brunswick, New Jersey, United States of America

Job Description:

Johnson & Johnson Global Audit & Assurance (GAA) organization is seeking a Senior Technology Auditor in New Brunswick, NJ.

Global Audit & Assurance’s primary mission is to provide independent, objective assurance and advisory services to assist management in maintaining compliance with government and industry regulations, mitigating risk, and achieving operational excellence. The Senior Auditor will work across Johnson & Johnson's global technology environments, collaborate with teams throughout the organization to evaluate risks and internal controls related to cybersecurity, cloud, artificial intelligence, digital platforms, enterprise applications, privacy, and business transformation initiatives. This role provides broad exposure to senior leadership and opportunities to evaluate critical technology initiatives supporting one of the world's largest healthcare organizations.

Responsibilities:

• Perform risk-based technology audits with limited supervision, including Technology Risk-Based Reviews, pre-implementation reviews, and SOX 404 ITGC testing.
• Lead audit workstreams by providing direction, delegating responsibilities, reviewing work, and delivering constructive feedback.
• Plan and execute audit procedures, document assigned review areas and evaluate the design and operating effectiveness of controls across financial reporting, healthcare operations, privacy, data protection, and cybersecurity.
• Develop timely, high-quality audit deliverables, analyses, and communications that clearly support conclusions, demonstrate professional judgment, and meet departmental quality standards. 
• Identify key risks, root causes, and business impacts to develop practical recommendations to strengthen controls and reduce technology risk.
• Coordinate ongoing control testing in accordance with industry audit standards and J&J guidelines.
• Build trusted relationships with global cross-functional teams and external stakeholders throughout audit engagements.
• Leverage data analytics, automation, continuous monitoring, and AI-enabled audit techniques to deliver risk insights and enhance audit effectiveness.
• Translate complex technical matters into clear business risks, executive-level insights, and actionable recommendations for technical and non-technical audiences.
• Track remediation of audit findings and validate the adequacy and sustainability of management corrective actions.
• Maintain awareness of relevant laws, regulations, industry standards, and emerging technology risks, including cloud, artificial intelligence, data governance, major system implementations, cybersecurity, privacy, and third-party dependencies.

Qualifications - Required

• Bachelor’s degree (IT, Computer Science, Data Science, Accounting, or related field preferred).
• Minimum of 3 years of professional experience in information technology, audit, assurance or advisory services, preferably within a multinational company, Big 4 firm, leading risk advisory firms or public accounting organization.
• Demonstrated ability to independently execute audit procedures, assess risk, evaluate controls and communicate recommendations to management. 
• Strong working knowledge of technology risk, cybersecurity, and information security frameworks and control concepts (e.g., NIST, COBIT, ISO)
• Strong analytical skills with a risk‑and‑control mindset.
• Ability to apply critical thinking and professional judgement to identify emerging risks and assess complex technology environments. Demonstrated ability to build trusted relationships, influence stakeholders, collaborate across teams and levels of management, and effectively lead audit workstreams and projects.  Excellent presentation and written communication skills.
• Ability to work in a highly collaborative, team-oriented environment.
• Demonstrated curiosity and commitment to continuous learning in emerging technology, cybersecurity, artificial intelligence and digital risk domains
• Ability to travel domestically and internationally (up to 40%).

Qualifications – Preferred:

• Experience in cybersecurity, cloud technologies, privacy, AI & data governance, supply chain/third-party risk, and technology controls;
• Proficiency/experience in Tech Risk Frameworks (e.g., COBIT, NIST, ISO)
• Familiarity with data analytic tools and knowledge of agile development, and emerging technologies (e.g., AI/ML, RPA).
• Experience with SAP HANA.
• Exposure and understanding of internal control concepts and processes with practical experience in regulatory compliance, internal audits, risk management, and process improvement.
• Professional security, audit, or control-related certification, such as CISSP, CISA, CRISC, or CIA.

Required Skills:

 

 

Preferred Skills:

Analytical Reasoning, Audit and Compliance Trends, Audit Reporting, Business Behavior, Compliance Policies, Data Analysis, Execution Focus, Financial Analysis, Financial Risk Management (FRM), Internal Auditing, Internal Controls, Issue Escalation, Leverages Information, Problem Solving, Process Oriented, Professional Ethics, Risk Assessments

 

 

The anticipated base pay range for this position is :

$79,000.00 - $127,650.00

Additional Description for Pay Transparency:

Subject to the terms of their respective plans, employees are eligible to participate in the Company’s consolidated retirement plan (pension) and savings plan (401(k)).


Subject to the terms of their respective policies and date of hire, employees are eligible for the following time off benefits:

Vacation –120 hours per calendar year

Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year

Holiday pay, including Floating Holidays –13 days per calendar year

Work, Personal and Family Time - up to 40 hours per calendar year

Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child

Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year

Caregiver Leave – 80 hours in a 52-week rolling period10 days

Volunteer Leave – 32 hours per calendar year

Military Spouse Time-Off – 80 hours per calendar year

For additional general information on Company benefits, please go to: - https://www.careers.jnj.com/employee-benefits