Director, Global Audit & Assurance

6090-Johnson & Johnson Services Legal Entity • Brunswick, OH

2d • Onsite

About The Position

Johnson & Johnson is recruiting for a Director – Digital Risk, Global Audit & Assurance located in New Brunswick, NJ. Global Audit & Assurance is the organization’s Internal Audit function. Global Audit & Assurance’s mission is to become a best-in-class audit organization delivering data driven, risk-based audit and assurance projects, that develops talent and drives Johnson & Johnson compliance. In this highly visible role, you will be a member of the Audit Leadership Team (ALT) within GA&A (J&J’s internal audit department) and reporting to the VP who leads Technology Audit, Global SOX Program and Digital Innovation. You will serve as a domain expert and audit leader, partnering with peer Directors to deliver integrated, risk-based audits across the organization. You will have oversight responsibility for approximately 30% of Technology Audit team, leading a broad and growing team of professionals to execute and deliver on the department’s Audit Risk Assessment plan and supervising audit activities. Your specific focus will be providing domain level expertise on critical enterprise risks related to Cybersecurity, Artificial Intelligence, Privacy & Data Governance. You will contribute to shaping the on-going involvement of the Technology audit function, our delivery capabilities and the integrated execution of the Internal Audit function.

Requirements

• A minimum of a bachelor's degree (BA/BS) is required.
• A minimum of 12 years of process & risk experience with focus on technology audit, assurance or compliance-related experience, including cyber risk, data/AI risk or related disciplines is required.
• Professional Services training and experience from a “Big 4” firm is preferred.
• Proven ability to establish and foster collaborative relationships with key stakeholders both within and external to the department, including experience working with senior level executives through staff.
• Strong communication and interpersonal skills; ability to properly frame key messages and communications based on audience, particularly senior level executives and stakeholders.
• Strong analytical skills, proven ability to approach challenges with a strategic mindset.
• Ability to lead the Technology organization and empower the team through times of change.
• Ability to influence/impact decisions, collaborate and build trust amongst senior business and technology leaders, direct reports and GA&A colleagues.
• Self-motivated, change agile; capacity to work with autonomy managing high levels of complexity, ambiguity and uncertainty.
• Proactivity and solution oriented, can-do attitude.
• Strong eagerness to maintain and improve processes in a dynamic environment with a focus on digitization and simplification.
• Exceptional time management and communication skills.
• Demonstrated ability to manage multiple conflicting customer and stakeholder demands.
• Passion for people and their development/career progression.
• Prior experience in developing and executing the technology components of an annual audit plan by coordinating various audits of internal controls over financial reporting and operational risks are required.
• Proven experience with auditing Cybersecurity risks, AI governance and emerging risks and privacy frameworks.
• Experience with artificial intelligence tools and technologies is required.
• Proven experience in Advisory or oversight roles (not just execution), supporting complex, cross-functional audits.
• Strong understanding of IT & Information technology General Controls Frameworks and standards such as NIST, ISO, SANS, COBIT, ITIL, COSO and regulations such as SOX, various Global Privacy standards, HIPAA is required.
• Strong understanding of business process fundamentals, including controls and related risks is required.
• Experience with the design, development, and implementation of internal controls for to address risks is required.
• Extensive experience financial and operational risk identification and validation.
• Knowledge and audit experience with risks related to cybersecurity, artificial intelligence, and data privacy/governance is required.
• English fluency (written and verbal) is required; fluency in multiple languages is a plus.

Nice To Haves

• An advanced degree (MBA or MS) is a plus.
• Ideal concentrations – Accounting, Finance, Technology related disciples.
• Professional certification (e.g. CISA, CIA, CPA, CIRSC, CISSP) is strongly preferred.
• Experience with auditing SAP products and associated risks and internal controls is strongly preferred.
• Professional experience in roles supporting a Pharmaceutical / Innovative Medicine or Medical Technology company is strongly preferred.

Responsibilities

• Direct and supervise a global Technology audit team through the annual audit and advisory plan lifecycle (i.e., conducting on-going risk assessments to determine scope, executing risk-based audit procedures related to technology related risks, with specific focus in the domain areas of – Cybersecurity, Artificial Intelligence, Privacy & Data Governance
• Serve as a technical authority during audit planning, fieldwork and reporting phases, including performing quality reviews over work product and final reports.
• Work collaboratively with VP, Sr. Director and Director audit personnel to manage the overall audit plan execution and deliver on integrated (Finance & Technology) audits.
• Work collaboratively to deliver various department initiatives.
• Provide oversight and methodology guidance during assurance and advisory reviews over key and emerging risk topics and technology, including but not limited to, Cybersecurity, Artificial Intelligence, Privacy & Data Governance.
• Identify systematic issues across audits and partner with stakeholders to diagnose root causes and recommend scalable control improvements.
• Act as a control environment thought leader, not just issue validator.
• Rapidly assess unfamiliar, emerging technologies, propose right-sized audit plans, balancing risk precision vs. practicality in drawing audit conclusions.
• Working collaboratively with other Technology Directors, lead the development, documentation, and maintenance of department’s Technology audit program consistent with enterprise policies, procedures, and established standards & methods.
• Work closely with other audit directors and compliance/testing leaders, to obtain adequate knowledge from pre/post-implementation activities to enable on-going audit activities in risk-based reviews.
• Stay abreast of industry and regulatory compliance pronouncements and drive the process to implement relevant standards for the Technology audit organization with a particular focus on Cybersecurity, Artificial Intelligence and Privacy & Data Governance.
• Serve as a trusted advisor across the Global Technology, Business and Compliance leadership, including VP level stakeholders, that support the Enterprise risks related to Cybersecurity, Artificial Intelligence, Privacy & Data Governance.
• Independent interaction to manage key messages related to the annual audit plan, including status and results/recommendations.
• Influence actionable change, considering audit results, to continuously improve the compliance posture of the organization and help achieve business strategy/results.
• Lead through times of significant enterprise process and technology transformation and promote adoption of new, digitized practices enabled by company transformation efforts.
• Foster high levels of trust and transparency with senior leaders throughout the organization.
• Provide people leadership to the Technology Audit organization, in a high performing, positive and engaging working environment, representing the teams in the annual performance review cycle and any applicable talent councils.
• Direct supervision and responsibility over a team of managers and their direct reports (~10 FTE with potential to grow).
• Partner and oversee select third party SMEs that may be engaged to support audit activities.
• Take ownership and collaborate across the department to help uplift current and future technical capabilities of the Internal Audit function and the talent pipeline.
• Serve as an Audit Leadership team member or sponsor for various pillar teams or Audit Risk Management teams related to key risk topics (e.g., Cybersecurity, Disruptive Technology and Privacy).

Benefits

• Vacation –120 hours per calendar year
• Sick time - 40 hours per calendar year; for employees who reside in the State of Colorado –48 hours per calendar year; for employees who reside in the State of Washington –56 hours per calendar year
• Holiday pay, including Floating Holidays –13 days per calendar year
• Work, Personal and Family Time - up to 40 hours per calendar year
• Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
• Bereavement Leave – 240 hours for an immediate family member: 40 hours for an extended family member per calendar year
• Caregiver Leave – 80 hours in a 52-week rolling period
• Volunteer Leave – 32 hours per calendar year
• Military Spouse Time-Off – 80 hours per calendar year

What This Job Offers

• Job Type: Full-time
• Career Level: Director