Lead Technology Risk Analyst (IT Audit) - remote

Stryker Corporation; Dallas (TX); Hybrid; USD 78,000 - 168,000; Full time

Job summary

Stryker Corporation seeks a Lead Technology Risk Analyst to lead technology-focused internal audits and risk advisory engagements across ERP platforms and enterprise applications. You will test ITGCs, ITACs, and key reports, applying AICPA/PCAOB standards to identify risks and strengthen controls.

Responsibilities include guiding audit workstreams, using data analytics, and delivering actionable remediation. Strong IT risk and audit experience required.

Qualifications

• Bachelor’s degree in information systems, computer science, accounting, finance, or a related field.
• Minimum 4 years of professional experience in management consulting and/or complex, matrixed global corporations.
• In‑depth multi‑ERP, IT infrastructure, and cloud solution technical expertise; SAP S/4 audit experience.
• Significant experience supporting business process audit teams; testing automated controls and key reports.
• Strong understanding of internal audit principles, methodologies, and professional standards.

Responsibilities

• Lead technology-focused internal audits, evaluating control design and effectiveness for tech and financial risks.
• Identify control gaps, process inefficiencies, and risk exposures; develop practical remediation recommendations.
• Coordinate and oversee audit workstreams; provide direction to senior analysts while ensuring objectives and timelines.
• Utilize data analytics, audit technologies, and security tools to enhance testing coverage and efficiency.
• Prepare clear audit documentation and reports communicating observations, root causes, and recommendations.
• Contribute to continuous improvement of audit methodologies, tools, and testing approaches.

Skills

Risk assessment

Internal audit

IT controls

Data analytics

SOX compliance

Education

Bachelor’s degree in information systems

Bachelor’s degree in accounting/finance

Tools

SAP S/4

Job description

Work Flexibility: Remote or Hybrid or Onsite

Why ARA at Stryker? Our team is growing, and we are seeking someone with technology risk acumen. Are you interested in driving improvements in risk management, controls, and governance processes? As a member of our Assurance and Risk Advisory (ARA) function, you will play an integral role in bringing value to the business to help the organization achieve its strategic objectives. You will have the chance to work with a dynamic and global team that supports the organization’s strategy through customer focus and innovation. As the Lead Technology Risk Analyst, you will be responsible for leading and executing technology-focused internal audit and risk advisory engagements, including integrated audits with a strong emphasis on IT risk and SOX compliance. This individual serves as a subject matter expert in the assessment and testing of IT general controls (ITGCs), automated controls (ITACs), and key reports across multiple ERP platforms and enterprise applications. The role requires deep expertise in internal control frameworks, and audit methodologies, as well as a strong understanding of financial reporting risks and technology-enabled business processes. The Lead Technology Risk Analyst applies internal audit principles and practices aligned with AICPA and PCAOB guidance / standards to identify risks, evaluate control design and operating effectiveness, and provide actionable recommendations that strengthen the organization’s control environment.

What You Will Do

Lead the execution of technology-focused internal audits, evaluating the design and effectiveness of controls that address key technology and financial risks. Identify control gaps, process inefficiencies, and risk exposures, developing practical and value-added recommendations that strengthen the organization’s risk and control environment. Coordinate and oversee audit workstreams, providing direction, coaching, and technical support to senior analysts / analysts while helping ensure audit objectives, timelines, and quality expectations are achieved. Utilize data analytics, audit technologies, and security tools to enhance testing procedures, expand risk coverage, and improve the efficiency and effectiveness of audit activities. Prepare clear, concise, and well-supported audit documentation and reports that communicate observations, risk implications, root causes, and actionable remediation recommendations. Contribute to the continuous improvement of audit methodologies, tools, templates, and testing approaches while helping to advance the technical capabilities of the broader Assurance and Risk Advisory team.

What You Need

Required:

• Bachelor’s degree in information systems, computer science, accounting, finance, or a related field
• Minimum 4 years of professional experience in, management consulting, and/or complex, matrixed global corporations
• In‑depth multi‑ERP, IT infrastructure, and cloud solution technical expertise SAP S/4 audit experience
• Significant experience supporting business process audit teams testing automated controls and key reports
• Strong understanding of internal audit principles, methodologies, and professional standards

Preferred:

• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or other relevant certifications
• MedTech or other regulated‑industry experience
• United States of America

Pay Ranges

USN: $77,700 - $129,500 USD Annual

US5: $81,600 - $136,000 USD Annual

US10: $85,500 - $142,500 USD Annual

US15: $89,400 - $148,900 USD Annual

US20: $93,200 - $155,400 USD Annual

US30: $101,000 - $168,400 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.

Travel

Percentage: 20%

Equal Opportunity

Stryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability.

Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

About Stryker

Stryker is one of the world’s leading medical technology companies and, together with its customers, is driven to make healthcare better. We offer innovative products and services in Orthopaedics, Medical and Surgical, and Neurotechnology and Spine that help improve patient and hospital outcomes. We are proud to be named one of the World’s Best Workplaces! For more information, visit: www.stryker.com

Work Flexibility

Remote – Role allows you to work the majority to 100% of time from an alternate workplace. These roles could have travel expectations, and you must work within the country of the job requisition location. Field-based – You can expect to regularly work a majority to 100% of time at customer facilities and has a set territory or expectation to travel within a set boundary. Almost all sales roles would likely be qualified as field-based. Onsite – Role is 100% located at a Stryker facility. Some ad hoc flexibility may be available depending on role, level, and job requirements. Manufacturing roles and any role that requires physical presence at the office would qualify under this category. Hybrid – You can expect to regularly work in both an alternate workplace and a Stryker facility. Roles that are partially remote or co-located would qualify as hybrid, and the expectation to be onsite would be defined and agreed upon by your manager/supervisor.