IT SOX Compliance Lead

Chubb Insurance Hong Kong; Bengaluru; On-site; INR 3,200,000 - 5,200,000; Full time

Job summary

Chubb Ltd. is seeking an experienced IT Compliance Lead to advance the technology SOX program. The role partners with Internal/External Audit and Finance to mature controls, ensure governance, and drive risk-aware decision making across technology platforms.

The ideal candidate brings strategic leadership, hands-on control design experience, and a track record of building high-performing teams within a global financial services setting.

Qualifications

• Leadership and strategic direction for the SOX IT compliance function.
• Drive scoping, planning and execution of the annual SOX IT compliance assessment.
• Mentor and develop a high-performing SOX IT compliance team.
• Partner with internal and external auditors and finance stakeholders.
• Stay current on regulatory changes and evolving technologies impacting SOX IT controls.

Responsibilities

• Lead ITGCs, ITACs, and SDLC control design and monitoring for SOX.
• Oversee remediation of audit findings with root-cause analysis.
• Collaborate with process owners to ensure compliance alignment.
• Communicate program status to executive leadership.
• Optimize use of GRC tools.

Skills

SOX IT Compliance

ITGCs

ITACs

SDLC Controls

Audit Coordination

GRC Tools

AuditBoard

DevSecOps

Cloud Environments

AI/LLM Risk

Tools

AuditBoard

Job description

About Chubb

Chubb is a world leader in insurance. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. The company is defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb employs approximately 40,000 people worldwide. Additional information can be found at: http://www.chubb.com/

About Chubb India

At Chubb India, we are on an exciting journey of digital transformation driven by a commitment to engineering excellence and analytics. With a team of over 2500 talented professionals, we foster a startup mindset that promotes collaboration, diverse perspectives, and a solution-driven attitude. We are dedicated to building expertise in engineering, analytics, and automation, empowering our teams to excel in a dynamic digital landscape. We offer an environment where you will be part of an organisation that is dedicated to solving real-world challenges in the insurance industry. Together, we will work to shape the future through innovation and continuous learning.

Position Details:

Job Title: IT Compliance Lead

Function/Department: Support

Location: Bangalore

Employment Type: Full-time

Position Overview:

Chubb is seeking a highly experienced and strategic Deputy, IT SOX Compliance Lead to support the management and continued maturation of Chubb's Technology SOX Compliance program. Reporting to the Vice President, Global Leader of SOX IT Compliance, this role will serve as a key senior contributor and subject matter expert in ensuring adherence to all applicable IT controls. It will act as a trusted partner to business stakeholders, Internal Audit, and External Audit teams, playing a critical role in driving compliance excellence and operational maturity across the organization. This position offers a unique opportunity to lead high-impact initiatives within a globally recognized financial services organization.

Key Responsibilities:

Leadership & Strategy-

• Serve as a lead and subject matter expert within the SOX IT Compliance function, providing strategic direction and hands‑on oversight of the Technology SOX program.
• Contribute to the strategic vision and roadmap for the SOX IT Compliance program, driving continuous improvement and maturation of the control environment.
• Build, mentor, and develop a high‑performing team of SOX IT compliance professionals, fostering a culture of accountability, collaboration, and continuous learning.
• Represent the SOX IT Compliance function in governance forums, effectively communicating program status, risks, and recommendations to executive leadership.
• Champion a risk‑aware culture across the organization by promoting awareness of SOX compliance requirements and best practices.

SOX Program Management-

• Lead and oversee the design, implementation, and monitoring of IT General Controls (ITGCs), IT Application Controls (ITACs), and Software Development Lifecycle (SDLC) requirements to ensure SOX compliance.
• Drive the scoping, planning, and execution of the annual SOX IT compliance assessment, ensuring timely and accurate completion of all testing and documentation activities.
• Analyze control results and identify opportunities for continuous improvement of the SOX control environment, developing actionable recommendations for remediation and enhancement.
• Oversee the remediation of control deficiencies identified by auditors, ensuring appropriate root cause analysis and action plans are defined, tracked, and resolved in a timely manner.

Audit & Stakeholder Management-

• Serve as a key point of contact and partner for internal, external, and regulatory auditors on the scope, depth, risks, and results of technology audits.
• Partner and negotiate with audit teams on control design, testing approaches, and findings to ensure balanced and pragmatic outcomes.
• Collaborate with process, control, and system owners across the organization to drive alignment and accountability for SOX compliance obligations.
• Maintain accountability towards the Finance organization, ensuring technology controls are aligned with financial reporting requirements and finance stakeholders are kept informed of compliance posture and open findings.
• Oversee the review and evaluation of SOC 1 Type 2 reports to assess vendor SOX compliance and determine appropriate reliance on third‑party systems and services.

Technology & Innovation-

• Evaluate and assess emerging technologies and evolving processes (e.g., DevSecOps, cloud environments, AI / large language models) and provide authoritative control guidance.
• Stay current on regulatory changes, industry trends, and technological advancements that may impact the SOX IT compliance landscape, proactively advising leadership on potential risks and opportunities.
• Drive the optimization and effective utilization of GRC tools (e.g., AuditBoard) to enhance program efficiency, reporting capabilities, and overall compliance monitoring.