Remote Senior Tech Risk Analyst: IT Controls & SOX

Stryker Corporation; Dallas (TX); Hybrid; USD 70,000 - 140,000; Full time

Benefits offered by this job

Remote work options

Travel 20%

Equal opportunity employer

Job summary

Stryker Corporation is seeking a Senior Technology Risk Analyst to join the Assurance & Risk Advisory team. You will lead technology-focused internal audits, assess IT general controls, and provide risk-based recommendations across ERP systems and cloud environments.

The role requires strong knowledge of internal audit principles, IT controls, and SOX testing, with opportunities to influence remediation plans and stakeholder reporting.

Qualifications

• Bachelor’s degree in information systems, computer science, accounting, finance, or a related field.
• Professional certifications such as CISA, CIA, CPA, or other relevant certifications are preferred.

Responsibilities

• Participate in audit planning by understanding business processes, identifying technology risks, and developing risk-based audit procedures.
• Test IT General Controls (ITGCs), automated controls, and key reports across enterprise applications and technology infrastructure to support SOX 404 compliance.
• Prepare high-quality audit workpapers and documentation in alignment with internal audit methodology, professional standards, and department policies.

Skills

IT audit

ITGC testing

Automation controls

SOX compliance

Education

Bachelor's degree in information systems / computer science / accounting / finance

CISA certification

CIA certification

CPA certification

Regulated-industry experience

Tools

SAP S/4 audit

Job description

Stryker Corporation is seeking a Senior Technology Risk Analyst to join the Assurance & Risk Advisory team. You will lead technology-focused internal audits, assess IT general controls, and provide risk-based recommendations across ERP systems and cloud environments.

The role requires strong knowledge of internal audit principles, IT controls, and SOX testing, with opportunities to influence remediation plans and stakeholder reporting.