Senior Technology Auditor, GA&A (1 of 2)

• Perform risk-based technology audits with limited supervision, including Technology Risk-Based Reviews, pre-implementation reviews, and SOX 404 ITGC testing.
• Lead audit workstreams by providing direction, delegating responsibilities, reviewing work, and delivering constructive feedback.
• Plan and execute audit procedures, document assigned review areas and evaluate the design and operating effectiveness of controls across financial reporting, healthcare operations, privacy, data protection, and cybersecurity.
• Develop timely, high-quality audit deliverables, analyses, and communications that clearly support conclusions, demonstrate professional judgment, and meet departmental quality standards.
• Identify key risks, root causes, and business impacts to develop practical recommendations to strengthen controls and reduce technology risk.
• Coordinate ongoing control testing in accordance with industry audit standards and J&J guidelines.
• Build trusted relationships with global cross-functional teams and external stakeholders throughout audit engagements.
• Leverage data analytics, automation, continuous monitoring, and AI-enabled audit techniques to deliver risk insights and enhance audit effectiveness.
• Translate complex technical matters into clear business risks, executive-level insights, and actionable recommendations for technical and non-technical audiences.
• Track remediation of audit findings and validate the adequacy and sustainability of management corrective actions.
• Maintain awareness of relevant laws, regulations, industry standards, and emerging technology risks, including cloud, artificial intelligence, data governance, major system implementations, cybersecurity, privacy, and third-party dependencies.

• Bachelor's degree (IT, Computer Science, Data Science, Accounting, or related field preferred).
• Minimum of 3 years of professional experience in information technology, audit, assurance or advisory services, preferably within a multinational company, Big 4 firm, leading risk advisory firms or public accounting organization.
• Demonstrated ability to independently execute audit procedures, assess risk, evaluate controls and communicate recommendations to management.

•

• Strong working knowledge of technology risk, cybersecurity, and information security frameworks and control concepts (e.g., NIST, COBIT, ISO)
• Strong analytical skills with a risk‑and‑control mindset.
• Ability to apply critical thinking and professional judgement to identify emerging risks and assess complex technology environments. Demonstrated ability to build trusted relationships, influence stakeholders, collaborate across teams and levels of management, and effectively lead audit workstreams and projects. Excellent presentation and written communication skills.
• Ability to work in a highly collaborative, team-oriented environment.
• Demonstrated curiosity and commitment to continuous learning in emerging technology, cybersecurity, artificial intelligence and digital risk domains
• Ability to travel domestically and internationally (up to 40%).

• Experience in cybersecurity, cloud technologies, privacy, AI & data governance, supply chain/third-party risk, and technology controls;
• Proficiency/experience in Tech Risk Frameworks (e.g., COBIT, NIST, ISO)
• Familiarity with data analytic tools and knowledge of agile development, and emerging technologies (e.g., AI/ML, RPA).
• Experience with SAP HANA.
• Exposure and understanding of internal control concepts and processes with practical experience in regulatory compliance, internal audits, risk management, and process improvement.
• Professional security, audit, or control-related certification, such as CISSP, CISA, CRISC, or CIA.

Johnson & Johnson is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or other characteristics protected by federal, state or local law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

Johnson & Johnson is committed to providing an interview process that is inclusive of our applicants' needs. If you are an individual with a disability and would like to request an accommodation, external applicants please contact us via https://www.jnj.com/contact-us/careers . internal employees contact AskGS to be directed to your accommodation resource.

If you are under 18 years of age, you (the candidate) may need to obtain the necessary working papers or other documentation required by state law to start the assignment, as well as get a parent's consent for the background check.