Overview
The organization is seeking a Senior Technology Risk Analyst to execute technology-focused internal audit and risk advisory engagements. This role supports proactive technology risk management and helps evaluate controls related to financial reporting risks and technology-enabled business processes, including SOX compliance testing.
Responsibilities
- Participate in audit planning by understanding business processes, identifying technology risks, and developing risk-based audit procedures.
- Conduct process walkthroughs, control evaluations, and testing to assess the design and operating effectiveness of technology controls.
- Test IT General Controls (ITGCs), automated controls, and key reports across enterprise applications and technology infrastructure to support SOX 404 compliance.
- Support technology advisory and consulting engagements related to system implementations, process changes, and technology initiatives.
- Prepare high-quality audit workpapers and documentation aligned with internal audit methodology, professional standards, and department policies.
- Analyze audit evidence, identify control gaps and process improvement opportunities, and clearly document audit observations.
- Partner with Management to develop remediation action plans, monitor progress, and validate resolution of identified control deficiencies.
- Review SOC 1 and SOC 2 reports for third-party service providers and assess their impact on the organization’s overall control environment.
Requirements
- Bachelor’s degree in information systems, computer science, accounting, finance, or a related field
- Minimum 2 years of professional experience in public accounting, internal audit, or management consulting
- Experience testing ITGCs across enterprise applications, infrastructure, and cloud environments
- SAP S/4 audit experience
- Experience supporting business process audit teams in testing automated controls, key reports, and other IT-dependent controls
- Strong understanding of internal audit principles, methodologies, and professional standards
Preferred Qualifications
- Professional certifications such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or other relevant certifications
- MedTech or other regulated-industry experience
Compensation & Benefits
Location
Other Information
- Posted Date: 09/29/2026 (This role will be posted for a minimum of 3 days.)
- Depending on customer requirements, employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.