Senior Manager, IT Control, Assurance, SOX

Johnson & Johnson

Sr. Manager leading IT controls, SOX, and compliance for Johnson & Johnson’s DePuy Synthes healthcare business.

Posted 8/11/2026full-timeNew Brunswick • Florida, Massachusetts, New Jersey, Pennsylvania • 🇺🇸 United StatesSenior💰 $122,000 - $245,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT Controls, SOX compliance, and Cybersecurity Governance, with a strong focus on risk assessment, control design, and remediation. Proven ability to lead cross-functional teams and manage complex audits in highly regulated environments.

Highest-signal resume keywords

IT Controls & AssuranceSOX ComplianceRisk AssessmentLeadership & Stakeholder ManagementCloud Compliance (AWS, Azure, GCP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IT AuditControl DesignContinuous Controls MonitoringAutomated Application ControlsDeficiency EvaluationRoot Cause AnalysisGRC ToolingERP PlatformsCloud EnvironmentsCompliance Assessment

Soft Skills

Cross-Functional CollaborationCoaching & MentoringCommunication SkillsTeam LeadershipStakeholder Engagement

Tools & Technologies

ServiceNow IRMAuditBoardArcherSAP S/4HANAWorkdayOracle

Certifications & Qualifications

CISACPACIACISSP

Industry Keywords

Cybersecurity GovernanceRegulatory ComplianceHealthcareMedTechPharmaceuticalsSOXSECGxPHIPAAGDPR

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityERPGoogle Cloud PlatformOracleSDLCServiceNow

About the role

Key responsibilities & impact

Lead the design, execution, and continuous improvement of DePuy Synthes' IT controls, assurance, and SOX program within Cybersecurity Governance & Risk
Own the enterprise IT SOX control framework, including ITGCs, automated application controls, and IT-dependent business controls
Lead design and operating effectiveness assessments across ERP, cloud, SaaS, and infrastructure platforms
Drive remediation of control gaps and embed preventive and detective controls in SDLC, DevOps pipelines, and cloud landing zones
Extend assurance activities to third parties and managed service providers, including SOC report and CUEC reviews
Serve as primary IT liaison for Internal Audit, External Auditors, and regulatory examiners
Advance continuous controls monitoring, analytics, and automation
Own end-to-end IT SOX scoping, risk assessment, control design, testing, deficiency evaluation, and reporting
Define the annual IT SOX plan with Finance, Internal Audit, and External Auditors
Lead management testing and ensure timely, high-quality evidence and workpapers
Drive deficiency evaluation, root cause analysis, remediation planning, and status reporting to leadership and the Audit Committee
Establish and operate the first-year SOX program for the standalone DePuy Synthes entity
Modernize SOX through GRC tooling, risk-based sampling, and automated evidence collection
Lead IT compliance activities across regulatory, contractual, and internal policy requirements
Maintain the integrated IT policy, standard, and control library
Track regulatory change and update controls, policies, and evidence
Coordinate responses to customer, partner, and regulator due diligence requests
Assess compliance implications of cloud, AI/ML, GenAI, and automation
Provide training and guidance to IT and business control owners
Report to the CISO, Director of Governance & Risk, Finance leadership, and Audit Committee
Support Day-1 readiness and post-separation BAU operations
Build, lead, and develop a global team across the US and GCC in India
Manage co-source and outsourced testing partners
Coach and mentor team members

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Security, Business, Engineering, or a related field (required)
10+ years of experience in IT audit, IT controls, SOX, or IT compliance
Experience in a Big 4 or large public company environment
Deep expertise in IT Controls & Assurance, SOX, and IT Compliance
Working knowledge of COBIT, COSO, NIST CSF, ISO 27001, and SOC 1/SOC 2
Experience coordinating with External Auditors, Internal Audit, and business process owners on complex, multi-entity audits
Ability to evaluate control deficiencies, drive remediation, and communicate risk and compliance status to executive stakeholders
Experience assessing IT controls and compliance in AWS, Azure, or GCP cloud environments and across ERP and SaaS platforms
Leadership, stakeholder management, and cross-functional collaboration skills, including managing global and co-sourced teams
Preferred: experience supporting a separation, spin-off, IPO, or standalone company establishing its first-year SOX and compliance program
Preferred: familiarity with SAP S/4HANA, Workday, Oracle, or other ERP platforms and control configurations
Preferred: experience with ServiceNow IRM, AuditBoard, Archer, continuous controls monitoring, or audit analytics
Preferred: background in healthcare, MedTech, pharmaceuticals, or highly regulated industries
Familiarity with SOX, SEC, GxP, HIPAA, GDPR, and emerging AI regulations
English proficiency required
Up to 15% domestic and international travel
Preferred certifications: CISA, CPA, CIA, CISSP, or equivalent

Benefits

Comp & perks

Consolidated retirement plan (pension)
Savings plan (401(k))
Vacation – 120 hours per calendar year
Sick time – 40 hours per calendar year; 48 hours for employees residing in Colorado; 56 hours for employees residing in Washington
Holiday pay, including Floating Holidays – 13 days per calendar year
Work, Personal and Family Time – up to 40 hours per calendar year
Parental Leave – 480 hours within one year of the birth/adoption/foster care of a child
Bereavement Leave – 240 hours for an immediate family member; 40 hours for an extended family member per calendar year
Caregiver Leave – 80 hours in a 52-week rolling period
Volunteer Leave – 32 hours per calendar year
Military Spouse Time-Off – 80 hours per calendar year
Inclusive interview process and accommodation support