Senior Analyst, IT SOX

Additional Locations:   N/A   Diversity - Innovation - Caring - Global Collaboration - Winning Spirit - High Performance   At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.     Boston Scientific is seeking an IT SOX Senior Analyst to support the execution and continuous improvement of the company’s IT SOX, IT Internal Controls, and Governance, Risk, and Compliance (GRC) programs. This role partners closely with the IT SOX Program Lead and cross-functional stakeholders across IT, Engineering, Finance, and Internal Audit to ensure effective design, execution, and monitoring of IT controls. The position focuses on day-to-day SOX execution, control testing support, deficiency management, and coordination with control owners and external auditors.   Key Responsibilities:

Support the execution and monitoring of IT SOX controls, including IT General Controls (ITGCs), Segregation of Duties (SOD), and IT Automated Controls (ITACs). Perform control walkthroughs and assist in documenting processes, risks, and control activities to ensure alignment with SOX requirements. Review control evidence for completeness, accuracy, and appropriateness prior to management and auditor review. Serve as a primary point of contact for control owners during audit cycles to facilitate timely and accurate responses to internal and external auditor requests (e.g., EY). Track audit requests and ensure timely submission of high-quality evidence. Support audit walkthroughs and testing by preparing documentation and coordinating stakeholder participation. Assist in identifying control gaps and deficiencies and documenting issues in a clear, audit-ready manner. Partner with control owners to develop and track remediation plans, including validation of corrective actions. Monitor remediation progress and escalate risks or delays as appropriate. Identify opportunities to enhance control design, streamline evidence collection, and improve overall SOX efficiency. Support the implementation of process improvements and standardization across systems and control owners. Contribute to SOX training materials and provide guidance to control owners on expectations and best practices. Support system implementations, upgrades, and process changes by assessing impacts to IT SOX controls and ensuring controls are appropriately designed and documented. Assist in evaluating access controls, privileged access management (e.g., CyberArk), and automated control logic where applicable.

Bachelor’s degree in Information Technology, Accounting, Finance, or related discipline 4–6 years of experience in IT SOX, IT audit, IT controls, or a related compliance function Experience with ITGCs, ITACs, Interface controls, Report testing Experience supporting SOX audits and working with external auditors (e.g., Big 4) Familiarity with GRC tools such as AuditBoard, SOXHub, or similar platforms

Professional certification such as CISA, CIA, or CPA (or progress toward certification) Strong attention to detail and organizational skills, with the ability to manage multiple priorities and deadlines Excellent communication and stakeholder management skills, with the ability to work across technical and business teams Experience in regulated industries (e.g., medical device, healthcare, or life sciences) preferred Exposure to cybersecurity, privileged access management, cloud environments and AI is a plus

Work Mode:   At Boston Scientific, we value collaboration and synergy. This role follows a hybrid work model requiring