OfferDrill.

Jobs › Stryker

This position has closed. Stryker removed this listing from their careers page on Oct 6, 2026. The interview prep below is still useful, and there are similar open roles at the bottom of this page.

Lead Technology Risk Analyst (IT Audit) - remote

Stryker · Chicago, IL · $77,700–$129,500 a year · Full time

Posted Sep 29, 2026 · We last checked this listing on Oct 5, 2026

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about the most significant IT control deficiency you've found. How did you evaluate its severity and communicate it?

What they are checking: Whether they can judge deficiency versus material weakness and deliver hard findings without damaging the relationship.

As the lead, how do you review a junior analyst's workpapers and coach them without just redoing the work yourself?

What they are checking: Whether they can raise the quality of a team's documentation and develop people, which the lead role requires.

Tell me about a time you turned an audit into real advisory value for the business, beyond the finding itself.

What they are checking: Whether they see internal audit as a partner to the business, which the ARA function says it wants.

What would you do

A process owner pushes back hard on your finding and says it isn't a real risk. How do you handle that conversation?

What they are checking: Whether they can defend a conclusion with evidence while staying open to facts they might have missed.

How do you coordinate with external auditors so they can rely on your SOX testing?

What they are checking: Whether they understand reliance strategy and the documentation quality it takes to reduce duplicated audit effort.

You're halfway through an engagement and realize the original risk assessment missed something important. What do you do?

What they are checking: Whether they will adjust scope openly and raise it early rather than finishing a plan they know is incomplete.

About the work

Walk me through how you'd scope an integrated SOX audit that covers ITGCs, ITACs and key reports across more than one ERP.

What they are checking: Whether they can tie technology controls back to financial statement risk instead of testing everything equally.

How do you test the design and operating effectiveness of a user access review control? What evidence do you ask for?

What they are checking: Whether they know the difference between a control existing and a control working, and how to prove each.

You're relying on a system-generated report for a key control. How do you get comfortable with its completeness and accuracy?

What they are checking: Whether they handle IPE testing to the standard external auditors and the PCAOB expect.

How would you test an automated three-way match control in an ERP, and how do you use benchmarking to avoid retesting it every year?

What they are checking: Whether they understand how automated controls are tested and when change management lets you rely on prior work.

The company is implementing a new ERP module mid-year. What would you look at in a system implementation review?

What they are checking: Whether they know where implementations break controls, such as data conversion, access and cutover.

Practice this interview out loud.

Offer builds a real interview for this exact role at Stryker from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Stryker.

Work Flexibility: Remote or Hybrid or Onsite Why ARA at Stryker? Our team is growing, and we are seeking someone with technology risk acumen. Are you interested in driving improvements in risk management, controls, and governance processes? As a member of our Assurance and Risk Advisory (ARA) function, you will play an integral role in bringing value to the business to help the organization achieve its strategic objectives. You will have the chance to work with a dynamic and global team that supports the organization’s strategy through customer focus and innovation. As the Lead Technology Risk Analyst, you will be responsible for leading and executing technology-focused internal audit and risk advisory engagements, including integrated audits with a strong emphasis on IT risk and SOX compliance. This individual serves as a subject matter expert in the assessment and testing of IT general controls (ITGCs), automated controls (ITACs), and key reports across multiple ERP platforms and enterprise applications. The role requires deep expertise in internal control frameworks, and audit methodologies, as well as a strong understanding of financial reporting risks and technology-enabled business processes. The Lead Technology Risk Analyst applies internal audit principles and practices aligned with AICPA and PCAOB guidance / standards to identify risks, evaluate control design and operating effectiveness, and provide actionable recommendations that strengthen the organization's control environment. What You Will Do • Lead the execution of technology-focused internal audits, evaluating the design and effectiveness of controls that address key technology and financial risks. • Identify control gaps, process inefficiencies, and risk exposures, developing practical and value-added recommendations that strengthen the organization's risk and control environment. • Coordinate and oversee audit workstreams, providing direction, coaching, and technical support to senior analysts / analysts while helping ensure audit objectives, timelines, and quality expectations are achieved. • Utilize data analytics, audit technologies, and security tools to enhance testing procedures, expand risk coverage, and improve the efficiency and effectiveness of audit activities. • Prepare clear, concise, and well-supported audit documentation and reports that communicate observations, risk implications, root causes, and actionable remediation recommendations. • Contribute to the continuous improvement of audit methodologies, tools, templates, and testing approaches while helping to advance the technical capabilities of the broader Assurance and Risk Advisory team. What You Need Required: • Bachelor’s degree in information systems, computer science, accounting, finance, or a related field • Minimum 4 years of professional experience in, management consulting, and/or complex, matrixed global corporations • In-depth multi-ERP, IT infrastructure, and cloud solution technical expertise • SAP S/4 audit experience • Significant experience supporting business process audit teams testing automated controls and key reports • Strong understanding of internal audit principles, methodologies, and professional standards Preferred: • Professional certifications such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or other relevant certifications • MedTech or other regulated-industry experience United States of America Pay Ranges: • USN : $77,700 - $129,500 USD Annual • US5 : $81,600 - $136,000 USD Annual • US10 : $85,500 - $142,500 USD Annual • US15 : $89,400 - $148,900 USD Annual • US20 : $93,200 - $155,400 USD Annual • US30 : $101,000 - $168,400 USD Annual View the U.S. work location and transparency guide to find the pay range for your location. Travel Percentage: 20% Stryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability. Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.