Stryker's Senior Lead for IT SOX Compliance and Audit will ensure processes and associated controls for SOX compliance are managed and assessed for effectiveness to reduce overall compliance risk across the global Information Services (IS) organization.
Management of the Global IS SOX Compliance program in establishing and standardizing SOX compliance and IT general controls.
Execute and/or provide oversight of IT General Controls and Application Controls for in-scope SOX systems, including control monitoring and reporting results of monitoring to IS management.
Work with control owners to resolve any potential issues before formal audits.
Establish key metrics/status report to management team on a periodic basis; metrics/status to include compliance review execution results, general audit activity metrics, management action plan status, special projects status, and other key metrics as deemed appropriate.
Assist control owners in development/refinement of procedures associated with their controls.
Work collaboratively with Internal Audit to ensure IS controls are consistent with IA expectations.
Work with Internal Audit on scheduling of internal and external SOX audits and coordinate support for the audits within the global IS organization.
Coordinate with Internal Audit on the preparation and communication of audit remediation work.
Track and monitor implementation of management action plans (MAPs) and monitor remediation according to agreed-upon schedule.
Perform compliance assessments for IS projects to determine whether systems needs SOX materiality.
Provide training and coaching to IS staff regarding areas of SOX compliance risks and related controls.
Keep current on emerging IS risks and IS relevant topics.
Bachelors degree or equivalent education required.
Other auditor qualifications (e.g., ISO Lead Auditor, ASQ, CISA) a plus.
Minimum of 7 years of experience required. Experience working in a regulated industry (e.g., Life Sciences, Medical Device, Finance) a plus.
Experience working for large public accounting firm, or related work experience.
Thorough understanding of SOX 404 and IT General Computer Control principles and practices.
Knowledge of industry standard frameworks (e.g., ISO 9001/27001/20000, COBIT, COSO).
Working experience with SOX controls and compliance (i.e., manual controls).
Auditing experience, including planning/executing/reporting, and hosting/facilitating.
Experience with ERP systems (e.g., Oracle, JD Edwards, iSeries, SAP).
Understanding of 21 CFR 820 desired.