Tech Risk & Compliance Lead

Job description

About Chubb JOB DESCRIPTION Chubb is a world leader in insurance. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. The company is defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb employs approximately 40,000 people worldwide. Additional information can be found at: www.chubb.com . About Chubb India At Chubb India, we are on an exciting journey of digital transformation driven by a commitment to engineering excellence and analytics. We are proud to share that we have been officially certified as a Great Place to Work® for the third consecutive year, reflecting the culture at Chubb, where we believe in fostering an environment where everyone can thrive, innovate, and grow. With a team of over 2500 talented professionals, we encourage a start-up mindset that promotes collaboration, diverse perspectives, and a solution-driven attitude. We are dedicated to building expertise in engineering, analytics, and automation, empowering our teams to excel in a dynamic digital landscape. We offer an environment where you will be part of an organisation that is dedicated to solving real-world challenges in the insurance industry. Together, we will work to shape the future through innovation and continuous learning. Position Details Job title: IT Infrastructure Compliance Lead Hiring location: Bangalore Employment type: Full-time Roles Overview The IT Infrastructure Compliance Lead is a senior position within the Global IT Compliance function, responsible for proactive monitoring and execution of SOX IT General Controls (ITGCs) and broader infrastructure compliance across the EMEA technology estate. The role holder reviews architecture and design documentation to assess SOX impact, guides application owners and infrastructure architects in implementing IT controls by design and serves as the primary interface with internal and external auditors (PwC), risk and compliance functions, and regional infrastructure leads across the UK, US, and the Philippines. Job Description • Proactively monitor design and operating effectiveness of SOX ITGCs across logical access, change management, computer operations, segregation of duties, backup, and disaster recovery. • Own the end-to-end control lifecycle: design, evidence collection, effectiveness testing, deficiency management, and remediation tracking. • Maintain a structured monitoring calendar for all periodic control activities, including quarterly privileged access reviews and DR tests; identify and escalate control gaps ahead of audit cycles and drive remediation to closure. • Review infrastructure architecture documents, design proposals, and change requests to assess SOX control implications before implementation; engage at the design stage with architects and engineers to embed ITGCs, preventing control gaps from being introduced through system design. • Provide compliance input into cloud migrations, platform modernisation, database upgrades, and identity management programmes. • Develop and maintain a controls reference framework as a practical design guide for architects and platform owners. • Act as compliance advisor to application owners, infrastructure architects, and engineering teams on ITGC-compliant access models, change workflows, and operational procedures. • Participate in architecture review boards and governance forums as the designated compliance representative; serve as primary contact for internal audit and PwC for all infrastructure-related SOX testing, evidence requests, and findings management. • Provide structured reporting to senior leadership on compliance posture, open findings, and remediation status. • Conduct periodic IT risk assessments and produce decision-ready risk reporting for senior management; assess compliance implications of new technologies and delivery models before adoption. • Drive standardisation and continuous improvement of the infrastructure compliance programme; develop guidance materials and training for infrastructure and application teams. • Operate effectively within an evolving regulatory environment, including DORA, FCA requirements, and Lloyd's reporting obligations. • SOX ITGCs: logical access, change management, computer operations, and segregation of duties. • Privileged access management tools: CyberArk and/or SailPoint. • Infrastructure platforms: Windows Server, Linux/AIX, iSeries (AS400), Oracle Database, SQL Server, and DB2. • Ability to critically assess architecture documents and identify control design implications. • Cloud compliance principles (AWS, Azure) and shared responsibility model. • GRC tooling: Archer or ServiceNow GRC. • Scripting capability (SQL, PowerShell) for control evidence automation. Qualifications Qualifications/Key requirements: • 6 to 12 years in IT infrastructure compliance, IT audit, or technology risk within financial services, insurance, or Big 4. • Proven ownership of SOX ITGC programmes, including proactive monitoring and deficiency remediation. • Track record of reviewing architectural artefacts from a compliance perspective and guiding technical teams on control implementation. • Prior engagement with Big 4 external audit at a senior client-side level, or equivalent auditor-side experience. • Required: Bachelor’s degree in computer science, Information Technology, or a related discipline. • Preferred: Certified Information Systems Auditor (CISA). • Advantageous: CRISC, CISM, or equivalent professional qualification. Why Chubb? Join Chubb to be part of a leading global insu