Senior Technology Risk Analyst (IT Audit) - remote

Stryker; Town of Texas (WI); Hybrid; USD 70,000 - 140,000; Full time

Job summary

Stryker is seeking a Senior Technology Risk Analyst to help proactively manage technology risks across the organization. You will participate in risk-based audits, test IT controls, and support SOX 404 compliance in a flexible work arrangement (remote/hybrid/on-site).

The role includes reviewing third-party reports and collaborating with management on remediation plans. Qualifications include a bachelor's degree in a related field and 2+ years in audit or consulting, with SAP S/4 audit

Qualifications

• Bachelor-level education in information systems or related field.
• 2+ years in public accounting, internal audit, or management consulting.
• Experience testing ITGCs across enterprise apps, infrastructure and cloud environments.

Responsibilities

• Participate in audit planning by understanding business processes and identifying technology risks.
• Perform walkthroughs, control evaluations, and testing of technology controls.
• Test ITGCs, automated controls, and key reports for SOX 404 compliance.
• Support advisory engagements related to system implementations and tech initiatives.
• Prepare audit workpapers aligned with standards and policies.
• Analyze evidence, identify control gaps, and document observations.
• Collaborate with mgmt to develop remediation plans and monitor progress.
• Review SOC 1 and SOC 2 reports to assess impact on control environment.

Skills

ITGC testing

SOX 404 compliance

Audit planning

Internal audit principles

Education

Bachelor's degree in information systems, computer science, accounting, finance, or related field

CISA/CIA/CPA or equivalent certifications (preferred)

Tools

SAP S/4

SOC 1/SOC 2 reports assessment

Job description

Work Flexibility: Remote or Hybrid or Onsite

Why ARA at Stryker?

The Assurance & Risk Advisory (ARA) function at Stryker continues to grow as we strengthen our focus on technology-enabled risk management, governance, and assurance. We are seeking a Senior Technology Risk Analyst to play a critical role in helping the organization proactively manage technology risks while supporting Stryker's strategic objectives. This role offers the opportunity to work with a global, collaborative team that delivers value through innovation, strong partnerships, and customer focus.

What You Will Do

• Participate in audit planning by understanding business processes, identifying technology risks, and developing risk-based audit procedures.
• Perform process walkthroughs, control evaluations, and testing to assess the design and operating effectiveness of technology controls.
• Test IT General Controls (ITGCs), automated controls, and key reports across enterprise applications and technology infrastructure to support SOX 404 compliance.
• Support technology advisory and consulting engagements related to system implementations, process changes, and technology initiatives.
• Prepare high-quality audit workpapers and documentation in alignment with internal audit methodology, professional standards, and department policies.
• Analyze audit evidence, identify control gaps and process improvement opportunities, and clearly document audit observations.
• Partner with Management to develop remediation action plans, monitor progress, and validate the resolution of identified control deficiencies.
• Review SOC 1 and SOC 2 reports for third-party service providers and assess their impact on the organization's overall control environment.

What You Need

Required:

• Bachelor's degree in information systems, computer science, accounting, finance, or a related field
• Minimum 2 years of professional experience in public accounting, internal audit, or management consulting
• Experience testing ITGCs across enterprise applications, infrastructure, and cloud environments
• SAP S/4 audit experience
• Experience supporting business process audit teams in the testing of automated controls, key reports, and other IT-dependent controls
• Strong understanding of internal audit principles, methodologies, and professional standards

Preferred:

• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or other relevant certifications
• MedTech or other regulated-industry experience

United States of America Pay Ranges:

• USN: $69,500 - $110,900 USD Annual
• US5: $73,000 - $116,400 USD Annual
• US10: $76,500 - $122,000 USD Annual
• US15: $79,900 - $127,500 USD Annual
• US20: $83,400 - $133,100 USD Annual
• US30: $90,400 - $144,200 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.

Travel Percentage: 20%

Stryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer - M/F/Veteran/Disability.

Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.