Senior SOX IT Controls Lead

Johnson & Johnson Co.; New Brunswick (NJ); On-site; USD 94,000 - 170,000; Full time

Job summary

Johnson & Johnson is recruiting a Professional, SOX Lead to manage ITGC and IT Application Controls for SOX compliance. The role partners with IT, Finance, Internal Audit, and external auditors to ensure a clean control environment and drive continuous improvements.

Located in New Brunswick, NJ or other eligible sites, the position requires deep expertise in COSO/COBIT, ERP controls, and control automation to strengthen cyber governance and risk management across the organization.

Qualifications

• 6+ years of progressive experience in IT audit, IT controls, SOX compliance, or tech risk and assurance.
• Hands-on ITGC design and testing across multiple domains.
• Experience coordinating with external auditors during a full SOX cycle.

Responsibilities

• Lead annual SOX IT scoping and control rationalization across applications and infrastructure.
• Design, document, and maintain ITGC frameworks aligned with COSO, COBIT, PCAOB.
• Plan walkthroughs, assessments, and testing; identify deficiencies and root causes.
• Coordinate with external auditors and Internal Audit for SOX evidence and issues.
• Assess deficiency severity and drive remediation with control owners to closure.
• Collaborate with IAM and governance teams on access controls and SoD.
• Evaluate control impact of ERP changes and new deployments pre-go-live.

Skills

IT audit

IT controls

SOX compliance

COSO

COBIT

PCAOB standards

ERP controls

communication skills

Education

Bachelor's degree in IT/CS/Accounting/IS/Finance

Advanced degree in cybersecurity or InfoSec (preferred)

Tools

SAP

Oracle

ServiceNow IRM

Archer

AuditBoard

SAP GRC

Job description

Johnson & Johnson is recruiting a Professional, SOX Lead to manage ITGC and IT Application Controls for SOX compliance. The role partners with IT, Finance, Internal Audit, and external auditors to ensure a clean control environment and drive continuous improvements.

Located in New Brunswick, NJ or other eligible sites, the position requires deep expertise in COSO/COBIT, ERP controls, and control automation to strengthen cyber governance and risk management across the organization.