Senior Analyst, IT SOX

Job Summary

Boston Scientific is seeking an IT SOX Senior Analyst to support the execution and continuous improvement of the company's IT SOX, IT Internal Controls, and Governance, Risk, and Compliance (GRC) programs.

This role partners closely with the IT SOX Program Lead and cross-functional stakeholders across IT, Engineering, Finance, and Internal Audit to ensure effective design, execution, and monitoring of IT controls. The position focuses on day-to-day SOX execution, control testing support, deficiency management, and coordination with control owners and external auditors.

Key Responsibilities

• Support the execution and monitoring of IT SOX controls, including IT General Controls (ITGCs), Segregation of Duties (SOD), and IT Automated Controls (ITACs).
• Perform control walkthroughs and assist in documenting processes, risks, and control activities to ensure alignment with SOX requirements.
• Review control evidence for completeness, accuracy, and appropriateness prior to management and auditor review.
• Serve as a primary point of contact for control owners during audit cycles to facilitate timely and accurate responses to internal and external auditor requests (e.g., EY).
• Track audit requests and ensure timely submission of high-quality evidence.
• Support audit walkthroughs and testing by preparing documentation and coordinating stakeholder participation.
• Assist in identifying control gaps and deficiencies and documenting issues in a clear, audit-ready manner.
• Partner with control owners to develop and track remediation plans, including validation of corrective actions.
• Monitor remediation progress and escalate risks or delays as appropriate.
• Identify opportunities to enhance control design, streamline evidence collection, and improve overall SOX efficiency.
• Support the implementation of process improvements and standardization across systems and control owners.
• Contribute to SOX training materials and provide guidance to control owners on expectations and best practices.
• Support system implementations, upgrades, and process changes by assessing impacts to IT SOX controls and ensuring controls are appropriately designed and documented.
• Assist in evaluating access controls, privileged access management (e.g., CyberArk), and automated control logic where applicable.

Required Qualifications

• Bachelor's degree in Information Technology, Accounting, Finance, or related discipline
• 4-6 years of experience in IT SOX, IT audit, IT controls, or a related compliance function
• Experience with ITGCs, ITACs, Interface controls, Report testing
• Experience supporting SOX audits and working with external auditors (e.g., Big 4)
• Familiarity with GRC tools such as AuditBoard, SOXHub, or similar platforms

Preferred Qualifications

• Professional certification such as CISA, CIA, or CPA (or progress toward certification)
• Strong attention to detail and organizational skills, with the ability to manage multiple priorities and deadlines
• Excellent communication and stakeholder management skills, with the ability to work across technical and business teams
• Experience in regulated industries (e.g., medical device, healthcare, or life sciences) preferred
• Exposure to cybersecurity, privileged access management, cloud environments and AI is a plus

Work Mode

At Boston Scientific, we value collaboration and synergy. This role follows a hybrid work model requiring employees to be in our local office at least three days per week.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.