Senior Analyst, IT SOX

Boston Scientific Gruppe; Gurugram District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Boston Scientific is seeking an IT SOX Senior Analyst to support IT SOX, IT Internal Controls, and GRC programs. The role collaborates with IT, Engineering, Finance, and Internal Audit to ensure effective design, execution, and monitoring of IT controls.

It focuses on day‑to‑day SOX execution, control testing, and remediation coordination. The position requires 4–6 years of IT SOX experience, familiarity with ITGCs/ITACs, and hands‑on experience with GRC tools like AuditBoard or SOXHub.

Qualifications

• Bachelor’s degree in Information Technology, Accounting, Finance, or related discipline.
• 4–6 years of experience in IT SOX, IT audit, IT controls, or a related compliance function.
• Experience with ITGCs, ITACs, Interface controls, Report testing.
• Experience supporting SOX audits and working with external auditors (e.g., Big 4).
• Familiarity with GRC tools such as AuditBoard, SOXHub, or similar platforms.

Responsibilities

• Support the execution and monitoring of IT SOX controls, including IT General Controls (ITGCs), Segregation of Duties (SOD), and IT Automated Controls (ITACs).
• Perform control walkthroughs and assist in documenting processes, risks, and control activities to ensure alignment with SOX requirements.
• Review control evidence for completeness, accuracy, and appropriateness prior to management and auditor review.
• Serve as a primary point of contact for control owners during audit cycles to facilitate timely and accurate responses to internal and external auditor requests (e.g., EY).
• Track audit requests and ensure timely submission of high-quality evidence.
• Support audit walkthroughs and testing by preparing documentation and coordinating stakeholder participation.
• Assist in identifying control gaps and deficiencies and documenting issues in a clear, audit-ready manner.
• Partner with control owners to develop and track remediation plans, including validation of corrective actions.
• Monitor remediation progress and elevate risks or delays as appropriate.
• Identify opportunities to enhance control design, streamline evidence collection, and improve overall SOX efficiency.
• Support system implementations, upgrades, and process changes by assessing impacts to IT SOX controls and ensuring controls are appropriately designed and documented.
• Assist in evaluating access controls, privileged access management (e.g., CyberArk), and automated control logic where applicable.

Skills

IT SOX

Audit coordination

Documentation & evidence

Stakeholder management

CyberArk PAM

Education

Bachelor’s degree in IT/Accounting/Finance

Tools

AuditBoard

SOXHub

Job description

Diversity - Innovation - Caring - Global Collaboration - Winning Spirit - High Performance

At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.

Boston Scientific is seeking an IT SOX Senior Analyst to support the execution and continuous improvement of the company’s IT SOX, IT Internal Controls, and Governance, Risk, and Compliance (GRC) programs.

This role partners closely with the IT SOX Program Lead and cross-functional stakeholders across IT, Engineering, Finance, and Internal Audit to ensure effective design, execution, and monitoring of IT controls. The position focuses on day-to-day SOX execution, control testing support, deficiency management, and coordination with control owners and external auditors.

Key Responsibilities:

• Support the execution and monitoring of IT SOX controls, including IT General Controls (ITGCs), Segregation of Duties (SOD), and IT Automated Controls (ITACs).
• Perform control walkthroughs and assist in documenting processes, risks, and control activities to ensure alignment with SOX requirements.
• Review control evidence for completeness, accuracy, and appropriateness prior to management and auditor review.
• Serve as a primary point of contact for control owners during audit cycles to facilitate timely and accurate responses to internal and external auditor requests (e.g., EY).
• Track audit requests and ensure timely submission of high-quality evidence.
• Support audit walkthroughs and testing by preparing documentation and coordinating stakeholder participation.
• Assist in identifying control gaps and deficiencies and documenting issues in a clear, audit-ready manner.
• Partner with control owners to develop and track remediation plans, including validation of corrective actions.
• Monitor remediation progress and elevate risks or delays as appropriate.
• Identify opportunities to enhance control design, streamline evidence collection, and improve overall SOX efficiency.
• Support the implementation of process improvements and standardization across systems and control owners.
• Contribute to SOX training materials and provide guidance to control owners on expectations and best practices.
• Support system implementations, upgrades, and process changes by assessing impacts to IT SOX controls and ensuring controls are appropriately designed and documented.
• Assist in evaluating access controls, privileged access management (e.g., CyberArk), and automated control logic where applicable.

Required Qualifications:

• Bachelor’s degree in Information Technology, Accounting, Finance, or related discipline
• 4–6 years of experience in IT SOX, IT audit, IT controls, or a related compliance function
• Experience with ITGCs, ITACs, Interface controls, Report testing
• Experience supporting SOX audits and working with external auditors (e.g., Big 4)
• Familiarity with GRC tools such as AuditBoard, SOXHub, or similar platforms

Preferred Qualifications:

• Professional certification such as CISA, CIA, or CPA (or progress toward certification)
• Strong attention to detail and organizational skills, with the ability to manage multiple priorities and deadlines
• Excellent communication and stakeholder management skills, with the ability to work across technical and business teams
• Experience in regulated industries (e.g., medical device, healthcare, or life sciences) preferred
• Exposure to cybersecurity, privileged access management, cloud environments and AI is a plus

Work Mode:

At Boston Scientific, we value collaboration and synergy. This role follows a hybrid work model requiring employees to be in our local office at least three days per week.

Boston Scientific transforms lives through innovative medical technologies that improve the health of patients around the world. As a global medical technology leader for more than 45 years, we advance science for life byprovidinga broad range of high-performance solutions that address unmet patient needs and reduce the cost of healthcare. Our portfolio of devices and therapies helps physicians diagnose and treat complex cardiovascular, respiratory, digestive, oncological,neurologicaland urological diseases and conditions. Learn more atwww.bostonscientific.com and follow us onLinkedIn .