OfferDrill.

Jobs › Stryker

This position has closed. Stryker removed this listing from their careers page on Oct 6, 2026. The interview prep below is still useful, and there are similar open roles at the bottom of this page.

Senior Technology Risk Analyst (IT Audit) - remote

Stryker · Chicago, IL · $69,500–$110,900 a year · Full time

Posted Sep 29, 2026 · We last checked this listing on Oct 5, 2026

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about an exception you found during testing. How did you decide whether it was a deficiency and how serious it was?

What they are checking: Whether they can evaluate exceptions with sound judgment instead of escalating everything or dismissing it.

Tell me about a time you explained a technical control issue to a non-technical finance manager.

What they are checking: Whether they can translate IT risk into business impact so the right people act on it.

How do you keep your workpapers clear enough that someone else could reperform your test?

What they are checking: Whether they document to an audit standard, which is what lets others rely on their work.

What would you do

A control owner keeps missing deadlines for evidence requests. How do you handle it?

What they are checking: Whether they can keep an audit on schedule while preserving a working relationship with the business.

You notice a privileged user has access that conflicts with their role, but the team says it's temporary. What do you do?

What they are checking: Whether they hold firm on segregation of duties risk and look for compensating controls and evidence.

About the work

Walk me through how you test a change management ITGC. What population do you pull and what are you looking for?

What they are checking: Whether they can test ITGCs to SOX standards and know where unauthorized changes slip through.

What's the difference between an IT general control and an IT application control, and why does the first matter for relying on the second?

What they are checking: Whether they understand that weak ITGCs undermine any reliance on automated controls.

How do you validate the completeness and accuracy of a key report pulled from an ERP?

What they are checking: Whether they know IPE testing well enough to satisfy external auditors and PCAOB expectations.

You're asked to do a technology risk assessment for a business unit. Where would you start?

What they are checking: Whether they can identify the systems and data that matter most and rank risk sensibly.

How would you approach a system implementation review for a new enterprise application before go-live?

What they are checking: Whether they know to look at data migration, access setup and testing evidence before problems reach production.

Practice this interview out loud.

Offer builds a real interview for this exact role at Stryker from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Stryker.

Work Flexibility: Remote or Hybrid or Onsite Why ARA at Stryker? The Assurance & Risk Advisory (ARA) function at Stryker continues to grow as we strengthen our focus on technology-enabled risk management, governance, and assurance. We are seeking a Senior Technology Risk Analyst to play a critical role in helping the organization proactively manage technology risks while supporting Stryker’s strategic objectives. This role offers the opportunity to work with a global, collaborative team that delivers value through innovation, strong partnerships, and customer focus. As the Senior Technology Risk Analyst, you will be responsible for executing technology-focused internal audit and risk advisory engagements, including SOX compliance testing, system implementation reviews, technology and data risk assessments, and operational audits. This individual serves as a subject matter expert in the auditing of IT general controls (ITGCs), IT automated controls (ITACs), and key reports across ERP platforms and other enterprise applications. The role requires knowledge and experience with internal control frameworks, and audit methodologies, as well as a strong understanding of financial reporting risks and technology-enabled business processes. The Senior Technology Risk Analyst applies internal audit principles and practices aligned with AICPA and PCAOB guidance / standards to assess control design and test operating effectiveness while providing clear concise reporting to key stakeholders within ARA team and broader organization. What You Will Do • Participate in audit planning by understanding business processes, identifying technology risks, and developing risk-based audit procedures. • Perform process walkthroughs, control evaluations, and testing to assess the design and operating effectiveness of technology controls. • Test IT General Controls (ITGCs), automated controls, and key reports across enterprise applications and technology infrastructure to support SOX 404 compliance. • Support technology advisory and consulting engagements related to system implementations, process changes, and technology initiatives. • Prepare high-quality audit workpapers and documentation in alignment with internal audit methodology, professional standards, and department policies. • Analyze audit evidence, identify control gaps and process improvement opportunities, and clearly document audit observations. • Partner with Management to develop remediation action plans, monitor progress, and validate the resolution of identified control deficiencies. • Review SOC 1 and SOC 2 reports for third-party service providers and assess their impact on the organization’s overall control environment. What You Need Required: • Bachelor’s degree in information systems, computer science, accounting, finance, or a related field • Minimum 2 years of professional experience in public accounting, internal audit, or management consulting • Experience testing ITGCs across enterprise applications, infrastructure, and cloud environments • SAP S/4 audit experience • Experience supporting business process audit teams in the testing of automated controls, key reports, and other IT-dependent controls • Strong understanding of internal audit principles, methodologies, and professional standards Preferred: • Professional certifications such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or other relevant certifications • MedTech or other regulated-industry experience United States of America Pay Ranges: • USN : $69,500 - $110,900 USD Annual • US5 : $73,000 - $116,400 USD Annual • US10 : $76,500 - $122,000 USD Annual • US15 : $79,900 - $127,500 USD Annual • US20 : $83,400 - $133,100 USD Annual • US30 : $90,400 - $144,200 USD Annual View the U.S. work location and transparency guide to find the pay range for your location. Travel Percentage: 20% Stryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability. Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.