Senior Analyst IT SOX

Boston Scientific; Gurgaon; Hybrid; INR 1,200,000 - 2,200,000; Full time

Job summary

Boston Scientific is seeking an IT SOX Senior Analyst to support IT SOX, IT Internal Controls, and GRC programs. The role collaborates with IT, Engineering, Finance, and Internal Audit to design, execute, and monitor IT controls and remediation efforts.

The position focuses on day-to-day SOX execution, control testing, deficiency management, and coordinating with control owners and external auditors (e.g., EY). A hybrid work model applies.

Qualifications

• Bachelor’s degree as listed in the qualifications.
• 4–6 years of experience in IT SOX, IT audit, IT controls, or related compliance.
• Experience with ITGCs, ITACs, Interface controls, Report testing.
• Experience supporting SOX audits and working with external auditors (e.g., Big 4).
• Familiarity with GRC tools such as AuditBoard, SOXHub, or similar platforms.

Responsibilities

• Support the execution and monitoring of IT SOX controls, including IT General Controls (ITGCs), Segregation of Duties (SOD), and IT Automated Controls (ITACs).
• Perform control walkthroughs and document processes, risks, and control activities for SOX compliance.
• Review control evidence for completeness, accuracy, and appropriateness prior to management and auditor review.
• Serve as a primary point of contact for control owners during audit cycles to facilitate responses to internal and external auditor requests (e.g., EY).
• Track audit requests and ensure timely submission of high-quality evidence.
• Support audit walkthroughs and testing by preparing documentation and coordinating stakeholder participation.
• Assist in identifying control gaps and deficiencies and documenting issues in a clear, audit-ready manner.
• Partner with control owners to develop and track remediation plans, including validation of corrective actions.
• Monitor remediation progress and elevate risks or delays as appropriate.
• Identify opportunities to enhance control design, streamline evidence collection, and improve overall SOX efficiency.
• Support system implementations, upgrades, and process changes by assessing impacts to IT SOX controls and ensuring controls are appropriately designed and documented.
• Assist in evaluating access controls, privileged access management (e.g., CyberArk), and automated control logic where applicable.

Skills

ITGCs

ITACs

Interface controls

SOX testing

Audit coordination

Education

Bachelor’s degree in Information Technology, Accounting, Finance, or related discipline

Tools

AuditBoard

SOXHub

Job description

Job Description:

Additional Locations

N/A

Diversity - Innovation - Caring - Global Collaboration - Winning Spirit - High Performance

At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.

Boston Scientific is seeking an IT SOX Senior Analyst to support the execution and continuous improvement of the company’s IT SOX, IT Internal Controls, and Governance, Risk, and Compliance (GRC) programs.

This role partners closely with the IT SOX Program Lead and cross-functional stakeholders across IT, Engineering, Finance, and Internal Audit to ensure effective design, execution, and monitoring of IT controls. The position focuses on day-to-day SOX execution, control testing support, deficiency management, and coordination with control owners and external auditors.

Key Responsibilities

• Support the execution and monitoring of IT SOX controls, including IT General Controls (ITGCs), Segregation of Duties (SOD), and IT Automated Controls (ITACs).
• Perform control walkthroughs and assist in documenting processes, risks, and control activities to ensure alignment with SOX requirements.
• Review control evidence for completeness, accuracy, and appropriateness prior to management and auditor review.
• Serve as a primary point of contact for control owners during audit cycles to facilitate timely and accurate responses to internal and external auditor requests (e.g., EY).
• Track audit requests and ensure timely submission of high-quality evidence.
• Support audit walkthroughs and testing by preparing documentation and coordinating stakeholder participation.
• Assist in identifying control gaps and deficiencies and documenting issues in a clear, audit-ready manner.
• Partner with control owners to develop and track remediation plans, including validation of corrective actions.
• Monitor remediation progress and elevate risks or delays as appropriate.
• Identify opportunities to enhance control design, streamline evidence collection, and improve overall SOX efficiency.
• Support the implementation of process improvements and standardization across systems and control owners.
• Contribute to SOX training materials and provide guidance to control owners on expectations and best practices.
• Support system implementations, upgrades, and process changes by assessing impacts to IT SOX controls and ensuring controls are appropriately designed and documented.
• Assist in evaluating access controls, privileged access management (e.g., CyberArk), and automated control logic where applicable.

Required Qualifications

• Bachelor’s degree in Information Technology, Accounting, Finance, or related discipline
• 4–6 years of experience in IT SOX, IT audit, IT controls, or a related compliance function
• Experience with ITGCs, ITACs, Interface controls, Report testing
• Experience supporting SOX audits and working with external auditors (e.g., Big 4)
• Familiarity with GRC tools such as AuditBoard, SOXHub, or similar platforms

Preferred Qualifications

• Professional certification such as CISA, CIA, or CPA (or progress toward certification)
• Strong attention to detail and organizational skills, with the ability to manage multiple priorities and deadlines
• Excellent communication and stakeholder management skills, with the ability to work across technical and business teams
• Experience in regulated industries (e.g., medical device, healthcare, or life sciences) preferred
• Exposure to cybersecurity, privileged access management, cloud environments and AI is a plus

Work Mode

At Boston Scientific, we value collaboration and synergy. This role follows a hybrid work model requiring employees to be in our local office at least three days per week.

Boston Scientific transforms lives through innovative medical technologies that improve the health of patients around the world. As a global medical technology leader for more than 45 years, we advance science for life by providing a broad range of high-performance solutions that address unmet patient needs and reduce the cost of healthcare. Our portfolio of devices and therapies helps physicians diagnose and treat complex cardiovascular, respiratory, digestive, oncological, neurological and urological diseases and conditions. Learn more atwww.bostonscientific.comand follow us onLinkedIn.