Senior Technology Risk Analyst (IT Audit) - remote

Stryker; Boston (MA); Remote; USD 75,000 - 130,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Employee Stock Purchase Plan (ESPP)

Wellbeing program

Job summary

Stryker, a leader in medical technology, seeks a Senior Technology Risk Analyst to strengthen technology risk management and assurance across ERP and enterprise systems. You will perform ITGC testing, system implementation reviews, and risk assessments, reporting findings to stakeholders with precision.

The role requires 2+ years in public accounting or internal audit, SAP S/4 experience, and solid knowledge of AICPA/PCAOB standards.

Qualifications

• Bachelor's degree in IS/CS/Accounting/Finance or related field
• 2+ years in public accounting, internal audit, or management consulting
• Experience testing ITGCs across ERP, infrastructure, and cloud environments
• SAP S/4 audit experience
• Strong understanding of internal audit principles, methodologies, and standards (AICPA/PCAOB)

Responsibilities

• Participate in audit planning by understanding processes and identifying technology risks
• Conduct walkthroughs, control evaluations, and testing for design and operating effectiveness
• Test ITGCs, automated controls, and key reports to support SOX 404 compliance
• Support technology advisory engagements related to system implementations and changes
• Prepare high-quality audit workpapers and documentation per methodology and policies
• Analyze audit evidence, identify control gaps, and document observations clearly
• Develop remediation plans with management and monitor progress

Skills

IT audit

SOX testing

Risk assessment

Audit documentation

Education

Bachelor's degree in IS/CS/Accounting/Finance

Tools

SAP S/4 audit

Job description

Why ARA at Stryker?

The Assurance & Risk Advisory (ARA) function at Stryker continues to grow as we strengthen our focus on technology-enabled risk management, governance, and assurance. We are seeking a Senior Technology Risk Analyst to play a critical role in helping the organization proactively manage technology risks while supporting Stryker's strategic objectives. This role offers the opportunity to work with a global, collaborative team that delivers value through innovation, strong partnerships, and customer focus.

As the Senior Technology Risk Analyst, you will be responsible for executing technology-focused internal audit and risk advisory engagements, including SOX compliance testing, system implementation reviews, technology and data risk assessments, and operational audits. This individual serves as a subject matter expert in the auditing of IT general controls (ITGCs), IT automated controls (ITACs), and key reports across ERP platforms and other enterprise applications. The role requires knowledge and experience with internal control frameworks, and audit methodologies, as well as a strong understanding of financial reporting risks and technology-enabled business processes. The Senior Technology Risk Analyst applies internal audit principles and practices aligned with AICPA and PCAOB guidance / standards to assess control design and test operating effectiveness while providing clear concise reporting to key stakeholders within ARA team and broader organization.

What You Will Do

• Participate in audit planning by understanding business processes, identifying technology risks, and developing risk-based audit procedures.
• Perform process walkthroughs, control evaluations, and testing to assess the design and operating effectiveness of technology controls.
• Test IT General Controls (ITGCs), automated controls, and key reports across enterprise applications and technology infrastructure to support SOX 404 compliance.
• Support technology advisory and consulting engagements related to system implementations, process changes, and technology initiatives.
• Prepare high-quality audit workpapers and documentation in alignment with internal audit methodology, professional standards, and department policies.
• Analyze audit evidence, identify control gaps and process improvement opportunities, and clearly document audit observations.
• Partner with Management to develop remediation action plans, monitor progress, and validate the resolution of identified control deficiencies.
• Review SOC 1 and SOC 2 reports for third-party service providers and assess their impact on the organization’s overall control environment.

What You Need

Required:

• Bachelor's degree in information systems, computer science, accounting, finance, or a related field
• Minimum 2 years of professional experience in public accounting, internal audit, or management consulting
• Experience testing ITGCs across enterprise applications, infrastructure, and cloud environments
• SAP S/4 audit experience
• Experience supporting business process audit teams in the testing of automated controls, key reports, and other IT-dependent controls
• Strong understanding of internal audit principles, methodologies, and professional standards

Preferred:

• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or other relevant certifications
• MedTech or other regulated-industry experience

Posted Date: 09/29/2026
This role will be posted for a minimum of 3 days.

United States of America Pay Ranges:

• USN: $69,500 - $110,900 USD Annual
• US5: $73,000 - $116,400 USD Annual
• US10: $76,500 - $122,000 USD Annual
• US15: $79,900 - $127,500 USD Annual
• US20: $83,400 - $133,100 USD Annual
• US30: $90,400 - $144,200 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.

Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program.

Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance.

Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes.

Alongside its customers around the world, Stryker impacts more than 150 million patients annually.

Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.