IT Auditor

Job description

Johnson & Johnson Corporate Headquarters is seeking an IT Auditor located in New Brunswick, NJ.

Caring for the world, one person at a time, has inspired and united the people of Johnson & Johnson for 125 years. We embrace research and science -- bringing innovative ideas, products and services to advance the health and well-being of people. Employees of the Johnson & Johnson Family of Companies work with partners in health care to touch the lives of over a billion people every day, throughout the world.

With $71.9 billion in 2016 sales, Johnson & Johnson is the world's most comprehensive and broadly based manufacturer of health care products, as well as a provider of related services, for the consumer, pharmaceutical, and medical devices and diagnostics markets. There are more than 265 Johnson & Johnson operating companies employing approximately 126,500 people and with products touching the lives of over a billion people every day, throughout the world.

Thriving on a diverse company culture, celebrating the uniqueness of our employees and committed to inclusion. Proud to be an equal opportunity employer.

Johnson & Johnson Corporate Headquarters is seeking an IT Auditor located in New Brunswick, NJ.

The primary mission of Corporate Internal Audit (CIA) is to assist Johnson & Johnson management in ensuring the existence of an effective system of internal controls that safeguard financial and information assets and ensure financial reporting integrity. Operating company financial and information technology systems and processes are audited to ensure compliance with selected government and industry regulations, as well as Johnson & Johnson policies and standards. CIA also aims to identify and facilitate the adoption of financial and information technology best practices throughout Johnson & Johnson. The Corporate Internal Audit department provides independent, objective assurance and advisory services designed to assist management in ensuring an effective system of Financial and IT internal controls are in compliance with government and industry regulations. Auditors will be assigned to audit any of the Johnson & Johnson Family of Companies across the various franchises and geographical regions. Auditors will work in assigned teams in accordance with the planned schedule.

The Corporate Internal Audit department completes an annual average of 500 audits, reviewing a variety of functions, technologies and processes of operating units throughout the world. Major areas reviewed for IT includes the data centers; SAP, JDE, ITGC(IT General Controls) and Information Security. The Corporate Internal Audit (CIA) IT Audit department, a member of the Johnson & Johnson Family of Companies, is currently recruiting for an IT Auditor. This position will be located in New Brunswick, NJ and travel will be required.

Job Description:

The IT Auditor will be responsible for conducting assigned audit engagements at Johnson & Johnson affiliates within other geographical regions timely and leading in a variety of projects. Specific responsibilities may include assisting with audit planning, completing testing procedures, documentation for assigned audit cycles relevant to risk and testing objectives, writing audit recommendations, presenting findings to management.

Other common tasks include: assisting the team coordinator in preparation of the audit which will include: reviewing previous audit reports and work papers, familiarity with assigned audit areas. Additionally, perform detailed testing as required and reviewing findings with the audit manager, team coordinator, and internal customers throughout the audit to ensure any potential concerns are addressed in a timely and effective manner. IT Auditor must ensure that documentation to support testing and audit conclusion is complete and thorough. IT Auditor will also participate in formal interim and final meetings to discuss and finalize findings and recommendations.

• Participate in IT Audit & Internal Controls Assurance engagements

• Analyze IT processes & controls

• Perform ongoing controls testing consistent with the J&J SOX 404 program guidelines

• Record and document results and compare to expected results.

• Generate historical analysis of test results

• Independently assess the design and operating effectiveness of internal controls over financial reporting

• Maintain and make necessary updates to adequate control and process documentation (i.e. control matrices, flowcharts, testing documentation) in accordance with engagement objectives

• Performs root cause analysis and articulate control deficiencies internally and with client senior management

• Coordinate and manage interactions with multi-functional and cross-geographical teams both internally and externally, as necessary

• Identifies weaknesses in internal controls and opportunities to enhance operational efficiencies

• Plan and schedule controls testing consistent with internal control guidelines and requirements

Candidate Profile:

• A Bachelor's degree (BA/BS) is required.

• A professional security, audit, or control-related certification, such as CISA, CIA, or CISSP, is preferred.

• Good understanding of IT Management Frameworks such as COBIT, ITIL and regulations such as SOX, PCI Compliance, HIPAA

• Experience with the design, development and implementation and testing of internal controls for IT.

• Analytical skills; specifically, the ability to assess and decompose processes utilizing a risk and control focus

• Highly motivated team players who are willing to go the extra mile

• 1- 2+ years of audit and advisory experience, preferably with a Big 4 or leading risk advisory/ public accounting firm or IT Risk & compliance

• Knowledge of auditing principals and internal control concepts

• Exposure or understanding of control concepts and processes with practical experience in regulatory compliance, internal audits, risk management.

• Some experience of IT system validation / quality testing is a plus

• High level of self-confidence, strong people and client management skills and demonstrated leadership ability

• Excellent presentation and written communication skills

• Influencing skills

• English fluency (written and verbal) is required; fluency in multiple languages is a plus.

• Must have the ability to work in a highly collaborative, team-oriented environment

• Willingness to travel domestically and internationally is required (25-30%)

• Perform audit planning considering the control risk, audit scope and objectives and time parameters established.

• Assist the Team Coordinator or lead the team in the preparation of the audit. Activities include reviewing previous audit reports and work papers, company files, technical research sources, financial reports and audit approaches to ensure a thorough familiarity with the audit areas assigned and determine the audit approach to be used.

• Meet with department and/or Company management responsible for the area under review to discuss the audit scope and coordination requirements.

• Conduct the audit via interviews and paper trail investigations as required, including the completion of work papers and the summarization of findings and observation in accordance with Department standards and model audit program steps.

• Review recommendations with the audit manager, team coordinator, and internal customers throughout the audit.

• Participate in formal interim and final meetings to discuss and finalize findings and recommendations.

• Perform special projects, including technical research studies, development of internal control education materials, and facilitating formal training sessions for audit staff and internal clients.

• Participate on specialized audits lead by our Audit Services Group (ASG) when appropriate. Participate in project teams established to achieve Department goals and objectives aimed at improving audit operations and customer service.

Desired profile

Qualifications :

• A minimum of a BA/BS degree is required, with a preferred major in Accounting, Finance or other business discipline.

• A minimum of 1 year of professional working experience in Accounting, Finance and/or Auditing is required.

• Sarbanes Oxley experience is preferred.

• CIA, CPA, CMA, CFA or CISA is preferred.

• Ability to travel approximately 40%, which includes domestic and international travel, is required.

• Fluency in multiple languages is preferred.