Lead Technology Auditor (1 of 3)

Johnson & Johnson Global Audit & Assurance (GAA) organization is seeking a Lead Technology Auditor! This hybrid role is based in New Brunswick, NJ.

At Johnson & Johnson, we believe good health is the foundation of vibrant lives, thriving communities and forward progress. That's why for more than 135 years, we have aimed to keep people well at every age and every stage of life. Today, as the world's largest and most broadly based healthcare company, we are committed to using our reach and size for good. We strive to improve access and affordability, create healthier communities, and put a healthy mind, body and environment within reach of everyone, everywhere.

Every day, our more than 140,000 employees across the world are blending heart, science and ingenuity to profoundly change the trajectory of health for humanity.

• Lead a team of auditors during audit engagements providing guidance, delegation, and feedback
• Influence without authority, both internal to GAA, and external partners (e.g., IT, Business/Process Owners)
• Effectively lead Third Party co-source relationships for audit engagements
• Auditing of sophisticated IT environments serving as the Team Coordinator on audit engagements
• Lead and execute risk based review audits with minimal supervision from Technology Audit Managers
• Capturing and analyzing information to identify key risks and corresponding controls
• Systematically testing and evaluating controls to verify efficiency and effectiveness of operation, reliability of data, and compliance with applicable laws and regulations
• Recommending control improvement opportunities in advisory capacity where appropriate
• Communicating findings and recommendations to management
• Documenting audit work using automated audit management tools
• Performs root cause analysis and articulates control deficiencies and remediation techniques both internally and with senior management
• Tracking, Monitoring, and following up on the status of corrective actions until closure
• Lead and perform ongoing risk assessments of capabilities throughout the enterprise, including but not limited to IT control design and processes
• Independently assess the design and operating efficiency of internal controls over financial reporting
• Coordinates & performs ongoing control testing consistent with the J&J SOX 404 program guidelines
• Coordinate and manage interactions with multi-functional and cross-geographical teams both internally and externally, as necessary
• As part of the audit process, the Lead Technology Auditor identifies internal control best practices and promotes their adoption across the enterprise
• In addition, Lead Technology Auditors to provide training to other department and affiliate organizations members and may lead Internal Audit improvement projects using appropriate methodologies.

• A Bachelor's degree (BA/BS) is required.
• 4+ years of information technology, audit, or assurance and advisory experience, preferably with a Big 4 or leading risk advisory/ public accounting firm. Must have knowledge of Master Data, system configuration, and process controls.
• Experience with the design, development, and implementation of internal controls for large ERP systems preferred.
• Analytical skills; specifically, the ability to assess and decompose processes utilizing a risk and control focus
• Good understanding of IT & Information Security Management Frameworks and standards such as ISO, SANS, COBIT, ITIL, CSA, and regulations such as SOX, PCI Compliance, and HIPAA with demonstrated proficiency in one or more of the following areas is required: ERP systems (SAP, JD Edwards), information security, program/project management, and/or infrastructure services (operating systems, databases, network).
• Experience with Cyber Security risk and control is preferred
• Experience with SAP HANA is preferred
• High level of self-confidence, strong people and management skills and proven leadership ability, strong influencing skills
• Experience interacting with all levels of management is required.
• Exposure or understanding of control concepts and processes with practical experience in regulatory compliance, internal audits, risk management, process improvement preferred
• Professional security, audit, or control-related certification, such as CISSP, CISA, CRISC, or CIA, is strongly preferred.
• Excellent presentation and written communication skills
• English fluency (written and verbal) is required; fluency in multiple languages is a plus.
• Must have the ability to work in a highly collaborative, team-oriented environment
• Willingness to travel domestically and internationally is required (up to 40%)