IT Infrastructure Compliance Lead

Chubb; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Flexible work options

Health coverage

Learning and career programs

Job summary

Chubb India is hiring an IT Infrastructure Compliance Lead to oversee SOX ITGC programmes across the global tech estate. You will design, monitor, and test controls, guiding architects and engineers to embed compliance by design, and serve as the main liaison with PwC and internal audit.

This senior role demands 6–12 years in tech risk, with Big 4 exposure and a CISA preference. Hybrid work model and strong focus on continuous control improvement and reporting.

Qualifications

• 6–12 years in IT infrastructure compliance or technology risk within financial services, insurance, or Big 4.
• Proven ownership of SOX ITGC programmes, including proactive monitoring and remediation.
• Experience reviewing architectural artefacts from a compliance perspective and guiding technical teams on control implementation.
• Prior engagement with Big 4 external audit at a senior client-side level, or equivalent auditor-side experience.
• Bachelor’s degree in computer science, Information Technology, or a related discipline.
• Preferred: Certified Information Systems Auditor (CISA).
• Advantageous: CRISC, CISM, or equivalent professional qualification.

Responsibilities

• Proactively monitor design and operating effectiveness of SOX ITGCs across logical access, change management, and computer operations.
• Own end-to-end control lifecycle: design, evidence collection, testing, and remediation tracking.
• Maintain a structured monitoring calendar for periodic control activities and DR tests; identify gaps and drive remediation.
• Review architecture documents and change requests for SOX control implications before implementation.
• Provide compliance input into cloud migrations, platform modernization, and identity management programs.
• Develop and maintain a controls reference framework for architects and platform owners.
• Act as compliance advisor to application owners and engineering teams on ITGC-compliant access models and workflows.
• Participate in architecture review boards and governance forums as the designated compliance representative.

Skills

SOX ITGC

IT audit

Risk management

Architecture review

Cloud compliance

GRC tooling

PowerShell

SQL

Education

Bachelor's degree in CS/IT or related

Tools

Archer

ServiceNow GRC

CyberArk

SailPoint

Job description

Chubb is a world leader in insurance. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. The company is defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb employs approximately 40,000 people worldwide. Additional information can be found at: www.chubb.com.

About Chubb India:

At Chubb India, we are on an exciting journey of digital transformation driven by a commitment to engineering excellence and analytics. We are proud to share that we have been officially certified as a Great Place to Work® for the third consecutive year, reflecting the culture at Chubb, where we believe in fostering an environment where everyone can thrive, innovate, and grow. With a team of over 2500 talented professionals, we encourage a start‑up mindset that promotes collaboration, diverse perspectives, and a solution‑driven attitude. We are dedicated to building expertise in engineering, analytics, and automation, empowering our teams to excel in a dynamic digital landscape.

We offer an environment where you will be part of an organisation that is dedicated to solving real‑world challenges in the insurance industry. Together, we will work to shape the future through innovation and continuous learning.

Position: IT Infrastructure Compliance Lead

Work mode: Hybrid, 3-day work from office

Experience: 6 to 12 years

The IT Infrastructure Compliance Lead is a senior position within the Global IT Compliance function, responsible for proactive monitoring and execution of SOX IT General Controls (ITGCs) and broader infrastructure compliance across the EMEA technology estate. The role holder reviews architecture and design documentation to assess SOX impact, guides application owners and infrastructure architects in implementing IT controls by design and serves as the primary interface with internal and external auditors (PwC), risk and compliance functions, and regional infrastructure leads across the UK, US, and the Philippines.

Job Description:

• Proactively monitor design and operating effectiveness of SOX ITGCs across logical access, change management, computer operations, segregation of duties, backup, and disaster recovery.
• Own the end‑to‑end control lifecycle: design, evidence collection, effectiveness testing, deficiency management, and remediation tracking.
• Maintain a structured monitoring calendar for all periodic control activities, including quarterly privileged access reviews and DR tests; identify and elevate control gaps ahead of audit cycles and drive remediation to closure.
• Review infrastructure architecture documents, design proposals, and change requests to assess SOX control implications before implementation; engage at the design stage with architects and engineers to embed ITGCs, preventing control gaps from being introduced through system design.
• Provide compliance input into cloud migrations, platform modernisation, database upgrades, and identity management programmes.
• Develop and maintain a controls reference framework as a practical design guide for architects and platform owners.
• Act as compliance advisor to application owners, infrastructure architects, and engineering teams on ITGC‑compliant access models, change workflows, and operational procedures.
• Participate in architecture review boards and governance forums as the designated compliance representative; serve as primary contact for internal audit and PwC for all infrastructure‑related SOX testing, evidence requests, and findings management.
• Provide structured reporting to senior leadership on compliance posture, open findings, and remediation status.
• Conduct periodic IT risk assessments and produce decision‑ready risk reporting for senior management; assess compliance implications of new technologies and delivery models before adoption.
• Drive standardisation and continuous improvement of the infrastructure compliance programme; develop guidance materials and training for infrastructure and application teams.
• Operate effectively within an evolving regulatory environment, including DORA, FCA requirements, and Lloyd's reporting obligations.
• SOX ITGCs: logical access, change management, computer operations, and segregation of duties.
• Privileged access management tools: CyberArk and/or SailPoint.
• Infrastructure platforms: Windows Server, Linux/AIX, iSeries (AS400), Oracle Database, SQL Server, and DB2.
• Ability to critically assess architecture documents and identify control design implications.
• Cloud compliance principles (AWS, Azure) and shared responsibility model.
• GRC tooling: Archer or ServiceNow GRC.
• Scripting capability (SQL, PowerShell) for control evidence automation.

Qualifications/Key requirements:

• 6 to 12 years in IT infrastructure compliance, IT audit, or technology risk within financial services, insurance, or Big 4.
• Proven ownership of SOX ITGC programmes, including proactive monitoring and deficiency remediation.
• Track record of reviewing architectural artefacts from a compliance perspective and guiding technical teams on control implementation.
• Prior engagement with Big 4 external audit at a senior client‑side level, or equivalent auditor‑side experience.
• Required: Bachelor’s degree in computer science, Information Technology, or a related discipline.
• Preferred: Certified Information Systems Auditor (CISA).
• Advantageous: CRISC, CISM, or equivalent professional qualification.

Why Chubb?

Join Chubb to be part of a leading global insurance company!

Our constant focus on employee experience, along with a start‑up‑like culture, empowers you to achieve impactful results.

• Industry leader: Chubb is a world leader in the insurance industry, powered by underwriting and engineering excellence
• A Great Place to work: Chubb India has been recognised as a Great Place to Work® for the years 2023-2024, 2024-2025 and 2025-2026
• Laser focus on excellence: At Chubb, we pride ourselves on our culture of greatness, where excellence is a mindset and a way of being. We constantly seek new and innovative ways to excel at work and deliver outstanding results
• Start‑Up Culture: Embracing the spirit of a start‑up, our focus on speed and agility enables us to respond swiftly to market requirements, while a culture of ownership empowers employees to drive results that matter
• Growth and success: As we continue to grow, we are steadfast in our commitment to provide our employees with the best work experience, enabling them to advance their careers in a conducive environment

Employee Benefits

Our company offers a comprehensive benefits package designed to support our employees’ health, well‑being, and professional growth. Employees enjoy flexible work options, generous paid time off, and robust health coverage, including treatment for dental and vision‑related requirements.

We invest in the future of our employees through continuous learning opportunities and career advancement programs, while fostering a supportive and inclusive work environment. Our benefits include:

• Savings and Investment plans: We provide specialised benefits like Corporate NPS (National Pension Scheme), Employee Stock Purchase Plan (ESPP), Long‑Term Incentive Plan (LTIP), Retirement Benefits and Car Lease that help employees optimally plan their finances
• Upskilling and career growth opportunities: With a focus on continuous learning, we offer customised programs that support upskilling, like Education Reimbursement Programs, Certification programs and access to global learning programs.
• Health and Welfare Benefits: We care about our employees’ well‑being in and out of work and have benefits like Employee Assistance Program (EAP), Yearly Free Health campaigns and comprehensive Insurance benefits.

Join Us

With you, Chubb is better. Whether you are solving challenges on a global stage or creating innovative solutions for local markets, your contributions will help shape the future. If you value integrity, innovation, and inclusion, and are ready to make a difference, we invite you to be part of Chubb India’s journey.