Senior Analyst, IT SOX

Boston Scientific

Boston Scientific is seeking an IT SOX Senior Analyst to support the execution and continuous improvement of the company’s IT SOX, IT Internal Controls, and Governance, Risk, and Compliance (GRC) programs.

This role partners closely with the IT SOX Program Lead and cross-functional stakeholders across IT, Engineering, Finance, and Internal Audit to ensure effective design, execution, and monitoring of IT controls. The position focuses on day-to-day SOX execution, control testing support, deficiency management, and coordination with control owners and external auditors.

Key Responsibilities

• Support the execution and monitoring of IT SOX controls, including IT General Controls (ITGCs), Segregation of Duties (SOD), and IT Automated Controls (ITACs).
• Perform control walkthroughs and assist in documenting processes, risks, and control activities to ensure alignment with SOX requirements.
• Review control evidence for completeness, accuracy, and appropriateness prior to management and auditor review.
• Serve as a primary point of contact for control owners during audit cycles to facilitate timely and accurate responses to internal and external auditor requests.
• Track audit requests and ensure timely submission of high-quality evidence.
• Support audit walkthroughs and testing by preparing documentation and coordinating stakeholder participation.
• Assist in identifying control gaps and deficiencies and documenting issues in a clear, audit-ready manner.
• Partner with control owners to develop and track remediation plans, including validation of corrective actions.
• Monitor remediation progress and escalate risks or delays as appropriate.
• Identify opportunities to enhance control design, streamline evidence collection, and improve overall SOX efficiency.
• Support the implementation of process improvements and standardization across systems and control owners.
• Contribute to SOX training materials and provide guidance to control owners on expectations and best practices.
• Support system implementations, upgrades, and process changes by assessing impacts to IT SOX controls and ensuring controls are appropriately designed and documented.
• Assist in evaluating access controls, privileged access management, and automated control logic where applicable.

Required Qualifications:

• Bachelor’s degree in Information Technology, Accounting, Finance, or related discipline
• 4–6 years of experience in IT SOX, IT audit, IT controls, or a related compliance function
• Experience with ITGCs, ITACs, Interface controls, Report testing
• Experience supporting SOX audits and working with external auditors
• Familiarity with GRC tools such as AuditBoard, SOXHub, or similar platforms