Senior Technology Risk Analyst (IT Audit) - remote

Stryker Corporation; Dallas (TX); Hybrid; USD 70,000 - 140,000; Full time

Benefits offered by this job

Remote work options

Travel 20%

Equal opportunity employer

Job summary

Stryker Corporation is seeking a Senior Technology Risk Analyst to join the Assurance & Risk Advisory team. You will lead technology-focused internal audits, assess IT general controls, and provide risk-based recommendations across ERP systems and cloud environments.

The role requires strong knowledge of internal audit principles, IT controls, and SOX testing, with opportunities to influence remediation plans and stakeholder reporting.

Qualifications

• Bachelor’s degree in information systems, computer science, accounting, finance, or a related field.
• Professional certifications such as CISA, CIA, CPA, or other relevant certifications are preferred.

Responsibilities

• Participate in audit planning by understanding business processes, identifying technology risks, and developing risk-based audit procedures.
• Test IT General Controls (ITGCs), automated controls, and key reports across enterprise applications and technology infrastructure to support SOX 404 compliance.
• Prepare high-quality audit workpapers and documentation in alignment with internal audit methodology, professional standards, and department policies.

Skills

IT audit

ITGC testing

Automation controls

SOX compliance

Education

Bachelor's degree in information systems / computer science / accounting / finance

CISA certification

CIA certification

CPA certification

Regulated-industry experience

Tools

SAP S/4 audit

Job description

Work Flexibility: Remote or Hybrid or Onsite

Why ARA at Stryker?

The Assurance & Risk Advisory (ARA) function at Stryker continues to grow as we strengthen our focus on technology-enabled risk management, governance, and assurance. We are seeking a Senior Technology Risk Analyst to play a critical role in helping the organization proactively manage technology risks while supporting Stryker’s strategic objectives. This role offers the opportunity to work with a global, collaborative team that delivers value through innovation, strong partnerships, and customer focus. As the Senior Technology Risk Analyst, you will be responsible for executing technology-focused internal audit and risk advisory engagements, including SOX compliance testing, system implementation reviews, technology and data risk assessments, and operational audits. This individual serves as a subject matter expert in the auditing of IT general controls (ITGCs), IT automated controls (ITACs), and key reports across ERP platforms and other enterprise applications. The role requires knowledge and experience with internal control frameworks, and audit methodologies, as well as a strong understanding of financial reporting risks and technology-enabled business processes. The Senior Technology Risk Analyst applies internal audit principles and practices aligned with AICPA and PCAOB guidance / standards to assess control design and test operating effectiveness while providing clear concise reporting to key stakeholders within ARA team and broader organization.

What You Will Do

Participate in audit planning by understanding business processes, identifying technology risks, and developing risk-based audit procedures. Perform process walkthroughs, control evaluations, and testing to assess the design and operating effectiveness of technology controls. Test IT General Controls (ITGCs), automated controls, and key reports across enterprise applications and technology infrastructure to support SOX 404 compliance. Support technology advisory and consulting engagements related to system implementations, process changes, and technology initiatives. Prepare high-quality audit workpapers and documentation in alignment with internal audit methodology, professional standards, and department policies. Analyze audit evidence, identify control gaps and process improvement opportunities, and clearly document audit observations. Partner with Management to develop remediation action plans, monitor progress, and validate the resolution of identified control deficiencies. Review SOC 1 and SOC 2 reports for third-party service providers and assess their impact on the organization’s overall control environment.

What You Need

• Bachelor’s degree in information systems, computer science, accounting, finance, or a related field
• Minimum 2 years of professional experience in public accounting, internal audit, or management consulting
• Experience testing ITGCs across enterprise applications, infrastructure, and cloud environments
• SAP S/4 audit experience
• Experience supporting business process audit teams in the testing of automated controls, key reports, and other IT-dependent controls
• Strong understanding of internal audit principles, methodologies, and professional standards

Preferred

• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or other relevant certifications
• MedTech or other regulated-industry experience
• United States of America

Pay Ranges

USN: $69,500 - $110,900 USD Annual

US5: $73,000 - $116,400 USD Annual

US10: $76,500 - $122,000 USD Annual

US15: $79,900 - $127,500 USD Annual

US20: $83,400 - $133,100 USD Annual

US30: $90,400 - $144,200 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.

Travel Percentage: 20%

Stryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability. Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

Stryker is one of the world’s leading medical technology companies and, together with its customers, is driven to make healthcare better. We offer innovative products and services in Orthopaedics, Medical and Surgical, and Neurotechnology and Spine that help improve patient and hospital outcomes. We are proud to be named one of the World’s Best Workplaces! For more information, visit: www.stryker.com

Work Flexibility Remote – Role allows you to work the majority to 100% of time from an alternate workplace. These roles could have travel expectations, and you must work within the country of the job requisition location. Field-based – You can expect to regularly work a majority to 100% of time at customer facilities and has a set territory or expectation to travel within a set boundary. Almost all sales roles would likely be qualified as field-based. Onsite – Role is 100% located at a Stryker facility. Some ad hoc flexibility may be available depending on role, level, and job requirements. Manufacturing roles and any role that requires physical presence at the office would qualify under this category. Hybrid – You can expect to regularly work in both an alternate workplace and a Stryker facility. Roles that are partially remote or co-located would qualify as hybrid, and the expectation to be onsite would be defined and agreed upon by your manager/supervisor.