Senior Technology Auditor, GA&A (1 of 2)

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world.  We provide an inclusive work environment where each person is considered as an individual.  At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Job Sub Function:

Job Category:

All Job Posting Locations:

Job Description:

Johnson & Johnson Global Audit & Assurance (GAA) organization is seeking a Senior Technology Auditor in New Brunswick, NJ.

Global Audit & Assurance’s primary mission is to provide independent, objective assurance and advisory services to assist management in maintaining compliance with government and industry regulations, mitigating risk, and achieving operational excellence. The Senior Auditor will work across Johnson & Johnson's global technology environments, collaborate with teams throughout the organization to evaluate risks and internal controls related to cybersecurity, cloud, artificial intelligence, digital platforms, enterprise applications, privacy, and business transformation initiatives. This role provides broad exposure to senior leadership and opportunities to evaluate critical technology initiatives supporting one of the world's largest healthcare organizations.

Responsibilities:

• Perform risk-based technology audits with limited supervision, including Technology Risk-Based Reviews, pre-implementation reviews, and SOX 404 ITGC testing.
• Lead audit workstreams by providing direction, delegating responsibilities, reviewing work, and delivering constructive feedback.
• Plan and execute audit procedures, document assigned review areas and evaluate the design and operating effectiveness of controls across financial reporting, healthcare operations, privacy, data protection, and cybersecurity.
• Develop timely, high-quality audit deliverables, analyses, and communications that clearly support conclusions, demonstrate professional judgment, and meet departmental quality standards. 
• Identify key risks, root causes, and business impacts to develop practical recommendations to strengthen controls and reduce technology risk.
• Coordinate ongoing control testing in accordance with industry audit standards and J&J guidelines.
• Build trusted relationships with global cross-functional teams and external stakeholders throughout audit engagements.
• Leverage data analytics, automation, continuous monitoring, and AI-enabled audit techniques to deliver risk insights and enhance audit effectiveness.
• Translate complex technical matters into clear business risks, executive-level insights, and actionable recommendations for technical and non-technical audiences.
• Track remediation of audit findings and validate the adequacy and sustainability of management corrective actions.
• Maintain awareness of relevant laws, regulations, industry standards, and emerging technology risks, including cloud, artificial intelligence, data governance, major system implementations, cybersecurity, privacy, and third-party dependencies.

Qualifications - Required

• Bachelor’s degree (IT, Computer Science, Data Science, Accounting, or related field preferred).
• Minimum of 3 years of professional experience in information technology, audit, assurance or advisory services, preferably within a multinational company, Big 4 firm, leading risk advisory firms or public accounting organization.
• Demonstrated ability to independently execute audit procedures, assess risk, evaluate controls and communicate recommendations to management. 
• Strong working knowledge of technology risk, cybersecurity, and information security frameworks and control concepts (e.g., NIST, COBIT, ISO)
• Strong analytical skills with a risk‑and‑control mindset.
• Ability to apply critical thinking and professional judgement to identify emerging risks and assess complex technology environments. Demonstrated ability to build trusted relationships, influence stakeholders, collaborate across teams and levels of management, and effectively lead audit workstreams and projects.  Excellent presentation and written communication skills.
• Ability to work in a highly collaborative, team-oriented environment.
• Demonstrated curiosity and commitment to continuous learning in emerging technology, cybersecurity, artificial intelligence and digital risk domains
• Ability to travel domestically and internationally (up to 40%).

Qualifications – Preferred:

• Experience in cybersecurity, cloud technologies, privacy, AI & data governance, supply chain/third-party risk, and technology controls;
• Proficiency/experience in Tech Risk Frameworks (e.g., COBIT, NIST, ISO)
• Familiarity with data analytic tools and knowledge of agile development, and emerging technologies (e.g., AI/ML, RPA).
• Experience with SAP HANA.
• Exposure and understanding of internal control concepts and processes with practical experience in regulatory compliance, internal audits, risk management, and process improvement.
• Professional security, audit, or control-related certification, such as CISSP, CISA, CRISC, or CIA.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act. 

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants’ needs. If you are an individual with a disability and would like to request an accommodation,  external applicants please contact us via https://www.jnj.com/contact-us/careers . internal employees contact AskGS to be directed to your accommodation resource. 

If you are under 18 years of age, you (the candidate) may need to obtain the necessary working papers or other documentation required by state law to start the assignment, as well as get a parent’s consent for the background check. 

Required Skills:

Preferred Skills:

The anticipated base pay range for this position is :

Additional Description for Pay Transparency: