Professional, SOX Lead

Johnson & Johnson · New Brunswick, NJ +5 more

RoleLantern checked

Corporate & BusinessFull-timeCompany career page

The apply link worked recently (not employer-confirmed).

Role summary

Johnson & Johnson's DePuy Synthes division seeks an experienced SOX compliance professional to design, execute, and improve IT general controls and application controls supporting regulatory compliance. The role involves leading annual SOX scoping, control testing, and remediation across applications, infrastructure, and systems while partnering with IT, Finance, Internal Audit, and external auditors.

What they're looking for

Bachelor's degree in IT, Computer Science, Accounting, Information Systems, Finance, or related field
6+ years progressive experience in IT audit, controls, SOX compliance, or technology risk and assurance
Demonstrated expertise in four ITGC domains: logical access, change management, program development, IT operations
Working knowledge of COSO 2013, COBIT, PCAOB standards, and SOX 404 requirements
Experience testing controls over ERP platforms (SAP, Oracle) and supporting infrastructure
Proven ability to assess deficiency severity and drive remediation to closure
Strong analytical, documentation, and communication skills across technical and non-technical audiences

What you'll be doing

Lead annual SOX IT scoping, risk assessment, and control rationalization across in-scope systems and applications
Design, document, and maintain ITGC frameworks aligned with COSO, COBIT, and PCAOB expectations
Execute walkthroughs, control design assessments, and operating effectiveness testing with root cause analysis
Serve as primary liaison for external auditors and Internal Audit coordinating SOX requests and evidence submission
Drive automation and continuous controls monitoring to improve testing efficiency and control coverage

Privacy & handoff

This role links to Johnson & Johnson's own application system. RoleLantern records your interest and checks the link, but the application happens on the employer's site and status updates may not come back to us. Clicking apply does not mark you as applied automatically.

What RoleLantern checked

This role is listed from an approved source. RoleLantern checks that the application link is live and how recently the role appeared — the employer has not confirmed it directly on RoleLantern.

RoleLantern checked active

RoleLantern checkedNeeds clarity

Date posted1 day ago

Last source checkToday

Salary listedNeeds clarity

Location clearClear

Something look off? Let us know and we may ask the employer to verify it.

See how you match this role

Upload your CV to see which of this role's requirements your background supports, where there may be gaps, and what needs clarification. Private by default — we never sell your CV.

See my match