Lead Technology Auditor

Johnson & Johnson Global Audit & Assurance (GAA) organization is seeking a Lead Information Technology (IT) Auditor The preferred location for this position is New Brunswick, NJ with consideration for other Johnson & Johnson sites in the U.S. and EMEA on a case-by-case basis

Caring for the world, one person at a time, has inspired and united the people of Johnson & Johnson for over 125 years. We embrace research and science - bringing innovative ideas, products, and services to advance the health and well-being of people. Employees of the Johnson & Johnson Family of Companies work with partners in health care to touch the lives of over a billion people worldwide.

With $93.8 billion in 2021 sales, Johnson & Johnson is the world's most comprehensive and broadly based manufacturer of health care products and a provider of related services for the consumer, pharmaceutical, medical devices, and diagnostics markets There are more than 265 Johnson & Johnson operating companies employing approximately 126,500 people and with products touching the lives of over a billion people worldwide. So if you have the talent and desire to touch the world, Johnson & Johnson has the career opportunities to help make it happen

**Responsibilities**:

- Lead a team of auditors during audit engagements providing guidance, delegation, and feedback.
- Influence without authority, both internal to GAA, and external partners (e.g., IT, Business/Process Owners).
- Effectively lead Third Party co-source relationships for audit engagements.
- Auditing of sophisticated IT environments serving as the Team Coordinator on audit engagements.
- Performing the following audit activity with limited supervision from IT Audit Managers.
- Capturing and analyzing information to identify key risks and corresponding controls.
- Systematically testing and evaluating controls to verify efficiency and effectiveness of operation, reliability of data, and compliance with applicable laws and regulations
- Recommending control improvements.
- Communicating findings and recommendations to management.
- Documenting audit work using automated audit management tools.
- Performs root cause analysis and articulates control deficiencies and remediation techniques both internally and with senior management.
- Tracking, Monitoring, and following up on the status of corrective actions until closure.
- Lead and perform ongoing risk assessments of capabilities throughout the enterprise, including but not limited to IT control design and processes.
- Independently assess the design and operating efficiency of internal controls over financial reporting.
- Coordinates & performs ongoing control testing consistent with the J&J SOX 404 program guidelines.
- Coordinate and manage interactions with multi-functional and cross-geographical teams both internally and externally, as necessary.
- As part of the audit process, the Lead IT Auditor identifies internal control best practices and promotes their adoption across the enterprise.
- In addition, Lead IT Auditors to provide training to other department and affiliate organizations members and may lead Internal Audit improvement projects using appropriate methodologies.

**Qualifications**
- A Bachelor's degree (BA/BS) is required.
- 4+ years of information technology, audit, or assurance and advisory experience, preferably with a Big 4 or leading risk advisory/ public accounting firm required.
- Knowledge of Master Data, system configuration, and process controls required.
- Experience interacting with all levels of management is required.
- Experience with the design, development, and implementation of internal controls for large ERP systems preferred.
- Analytical skills; specifically, the ability to assess and decompose processes utilizing a risk and control focus preferred.
- Good understanding of IT & Information Security Management Frameworks and standards such as ISO, SANS, COBIT, ITIL, CSA, and regulations such as SOX, PCI Compliance, and HIPAA with demonstrated proficiency in one or more of the following areas is required: ERP systems (SAP, JD Edwards), information security, program/project management, and/or infrastructure services (operating systems, databases, network) preferred.
- Experience with Cyber Security risk and control is preferred.
- Experience with SAP HANA is preferred.
- High level of self-confidence, strong people and management skills and proven leadership ability, strong influencing skills preferred.
- Exposure or understanding of control concepts and processes with practical experience in regulatory compliance, internal audits, risk management, process improvement preferred.
- Professional security, audit, or control-related certification, such as CISSP, CISA, CRISC, or CIA, is strongly preferred.
- Excellent presentation and written communication skills.
- English fluency (written and verbal) is required; fluency in multiple languages is a plus.
- Must have the ability to work in a highly col