Selling to Johnson and Johnson

Johnson & Johnson reported 94.2 billion dollars in sales for 2025, guided to roughly 100.5 billion dollars for 2026, and invested 14.7 billion dollars in research and development. Those are the numbers that excite a vendor, and the wrong ones to plan around.

The Johnson & Johnson Technology organisation, led by Chief Information Officer James Swanson, is described on the company's leadership page as more than 4,000 professionals across 50 countries. For 138,200 employees and 94 billion dollars of revenue, that is lean. J&J buys rather than builds. Your competition is rarely an internal engineering team.

Your competition is the incumbent, and the thing protecting the incumbent is validation.

How the buying process actually runs

You are selling into two companies, not one. Since the consumer health separation as Kenvue in 2023, Johnson & Johnson reports two segments: Innovative Medicine, 60.4 billion dollars of 2025 sales, and MedTech, 33.8 billion dollars. Innovative Medicine buys against clinical development, regulatory submission and pharmacovigilance workflows. MedTech buys against design controls, complaint handling, field inventory and hospital-facing commercial operations. A pitch that treats them as one account signals you have not done the work.

Purchase orders and invoices run through the supplier portal. Accounts payable, invoicing and terms are administered through the supplier portal at ap.jnj.com, with electronic invoicing against a purchase order on the SAP Ariba network. No purchase order means no payment, however well the meeting went.

Supplier quality is a gate, and it has teeth. J&J's supplier quality expectations require suppliers to maintain quality controls, to notify the company of proposed changes to specifications, methods, sub-suppliers, materials, components, processes, manufacturing location or equipment, and to permit audits of their facilities, systems and documents. Read the middle clause as a software vendor: your release cadence becomes a contractual conversation. The company runs a Supplier Quality Academy, and MedTech suppliers transact quality documentation through the MedTech Quality Exchange portal.

Anything touching a regulated process must be validated. If your product holds or influences GxP records, batch data, clinical data, adverse event handling, labelling or device complaint files, it enters computer system validation: specifications, installation, operational and performance qualification, traceability, audit trails, electronic signature controls under FDA 21 CFR Part 11 and the EU equivalent, change control and periodic review. Your documentation package is part of the product. Vendors who arrive with a SOC 2 report and nothing else lose months.

Qualification is why switching is rare. A validated system that has passed inspection is an asset the quality organisation will not re-create. That protects the incumbent, and will protect you once you are in. Your realistic entry points are new programmes, new sites, newly acquired businesses and systems already scheduled for replacement.

Who owns what, so you know where your deal belongs

You will not be selling to these people. Their remit tells you which part of the company your deal sits in, and whose priorities it has to survive.

Joaquin Duato is Chairman and Chief Executive Officer. Joseph J. Wolk is Chief Financial Officer, and a large multi-year commitment has to make sense to his organisation.

Names from Johnson & Johnson's leadership page, verified 11 September 2026. Senior roles change; verify at source.

Why you cannot sell this account from the bottom

Budget does not sit centrally. It sits in the two segment P&Ls, and inside those in therapeutic areas, franchises, sites and functions. A deal worth the cost of selling here runs into the millions a year, and anything spanning manufacturing sites or clinical operations runs higher across a multi-year term.

There is a second reason altitude matters. In October 2025 Johnson & Johnson announced its intent to separate its Orthopaedics business, which would stand alone as DePuy Synthes, with completion targeted within eighteen to twenty-four months. Anyone signing a multi-year MedTech commitment today has to know which entity owns the contract, which systems transfer, and which validation packages get re-executed. That is answered well above where cold outreach lands, and the board has formed a Special Committee for the Orthopaedics Separation.

The layer that matters sits below the public names

Ten people sit on the Executive Committee. They are not who you sell to.

The layer that matters is below: segment technology leaders inside Innovative Medicine and MedTech, quality and compliance heads, technical operations leaders at manufacturing sites, R&D informatics and data science leads, and the regulatory affairs people who will defend your system in an inspection.

What makes this account harder to map than a bank is that the buying committee has a seat on no org chart: the validation owner. A business sponsor wants the outcome, IT owns the platform, procurement owns the paper, and quality assurance owns whether the system can be validated and defended. Any one of them can stop the deal, and the quality voice is the one most vendors never speak to.

The estate is federated by history. Janssen, Ethicon, DePuy, Synthes, Actelion, Auris Health, Momenta, Abiomed, Shockwave and most recently Halda arrived through acquisition, and site-level systems still reflect that. There is no single answer to "what do they use".

The board is a published second-degree map

Johnson & Johnson's directors hold named positions at a specific set of other organisations. If anyone in your network is senior at one of them, you are two hops from a J&J director. Current and former roles are distinguished below; getting that wrong is the fastest way to lose credibility in this market.

A senior relationship at any organisation in that right-hand column is a checkable two-hop path to a Johnson & Johnson director. Almost nobody runs that query.

For a MedTech deal: Marillyn Hewson chairs the Special Committee for the Orthopaedics Separation, with Hubert Joly, Daniel Pinto, Mark Weinberger and Nadja West on it. Eugene Woods runs a major United States health system, a customer-side voice on this board.

Other routes in

Acquired-company alumni. Johnson & Johnson does not publish a global corporate alumni programme. The Belgian J&J Alumni Network, which grew out of the retired Janssen employees' network, is an independent volunteer organisation rather than a company-run channel. So the alumni play is narrower: find people who worked at Synthes, Actelion, Abiomed, Shockwave, Auris Health or Momenta before acquisition. They still know who stayed, and those relationships predate the integration.

Your health system and payer customers. MedTech sells to hospitals. If you already serve a large system, a clinical or supply chain executive there is a more credible referrer than anyone on your payroll.

Your pharma customers. Quality and clinical operations leaders move between sponsors, and a reference from someone who has passed an inspection with your system in place beats any deck.

The validation and CRO ecosystem. Consultancies, integrators and validation specialists already inside J&J sites can route you to the team with the problem, and often want to, because it makes their engagement stickier.

Finding which of those paths exists inside your own network is what a relationship intelligence platform is for.

And then you have to get your own side to make the ask

Suppose the strongest route runs through one of your own board members who also sits on a board with a J&J director. That is as good a path as exists, and close to unrepeatable. You have to get that person to prioritise it, write something credible, and spend a piece of a relationship that took years to build. Ask twice in a quarter and you will not be asked again.

The same applies to a customer champion. Asking them to introduce you to a peer at Johnson & Johnson is asking them to lend you their credibility. Ask badly, too often, or without a paragraph they can forward unedited, and you damage the relationship that made it possible.

Three rules for the introduction itself

Ask for the segment, not the company. "An introduction to whoever owns computer system validation for clinical systems in Innovative Medicine" is actionable. "An introduction to J&J" is not.

Write the blurb your connector will forward. They will not write your pitch. Give them a paragraph they can send without editing. The forwardable blurb is the whole craft.

A warm path starts the clock, it does not skip it. You will still go through supplier registration, supplier quality assessment, the right-to-audit conversation and computer system validation. What you get is a real conversation with someone who has a problem and a budget, several quarters earlier, and enough access to multithread into quality and regulatory before procurement gets involved.

See the warm paths into Johnson and Johnson

Everything above describes the problem: validated systems and qualification cycles measured in quarters. What it does not tell you is which of your own relationships already reaches inside. That is a question about your network, not theirs, and it is the one most teams answer from memory.

Boomerang maps the warm paths your company already has into accounts like Johnson and Johnson, across your team, your customers, your board and investors, and your partners. It then drafts the ask, routes it through the right connector and tracks it to a booked meeting. Book a 15-minute walkthrough and see it run against your own target accounts.