PHI - Lead- Tech Audit

Prudential Health India; Mumbai; On-site; INR 2,000,000 - 3,000,000; Full time

Job summary

Prudential Health India is seeking a Tech Audit Lead to establish the technology audit function. You will ensure compliance with regulations like IRDAI and oversee audits across cloud-native applications.

The ideal candidate has 10-18 years of experience, a Bachelor's in Engineering or Computer Science, and is familiar with compliance tools such as Checkmarx and GitHub. This position is on-site in Mumbai.

Qualifications

• 10–18 years of experience in technology audit, risk management, or compliance.
• Strong understanding of GCP and DevSecOps.
• Fluent written and spoken English.

Responsibilities

• Develop and implement a technology audit strategy and annual audit plan.
• Conduct risk-based audits across infrastructure and applications.
• Collaborate with InfoSec and DevSecOps teams for vulnerability management.

Skills

Technology audit

Risk management

Compliance

Analytical skills

Communication

Education

Bachelor's in Engineering or Computer Science

Certifications in CISA, CISSP, ISO 27001

Tools

Checkmarx

GitHub

Azure AD

HashiCorp Vault

CyberArk

Imperva

Job description

About The Job

Prudential Health India (PHI) is on a mission to make Indians healthier and bridge the health protection gap. This greenfield team is deploying a new health insurance product in India, focusing on customer‑centric journeys and bespoke experiences.

Tech Audit Lead

The title may vary based on experience: Tech Audit Lead, Senior Tech Audit Lead, or Associate Director, Technology Audit.

People Manager Role

Experience: 10–18 years

Location: Mumbai

Work Mode: Work from office only

Job Profile Summary

Establish and lead the technology audit function at PHI, ensuring compliance with internal policies, regulatory frameworks (IRDAI, GDPR, HIPAA), and Prudential Group standards. Oversee audit trails, vulnerability management, and risk mitigation across the cloud‑native infrastructure and applications.

Job Description

• Develop and implement a comprehensive technology audit strategy and annual audit plan aligned with PHI’s business and regulatory requirements.
• Conduct risk‑based audits across infrastructure, applications, data platforms, and security controls.
• Ensure complete and tamper‑proof audit trails of user activities, data changes, and system events.
• Collaborate with InfoSec, DevSecOps, and AppSec teams to validate remediation of vulnerabilities and ensure patch compliance.
• Lead privacy impact assessments, penetration testing reviews, and security onboarding for new applications.
• Monitor and report on the implementation of audit recommendations and track remediation progress.
• Maintain documentation and audit logs in accordance with professional standards and Prudential Group policies.
• Support investigations into technology‑related incidents, control breaches, or compliance failures.
• Present audit findings and risk assessments to senior leadership and the Audit Committee.
• Stay updated on emerging risks, regulatory changes, and best practices in technology audit and governance.

Security & Compliance Technologies

• Implement and audit SAST, DAST, and SCA scanning tools and processes.
• Ensure secure integration of CI/CD pipelines using Checkmarx, GitHub, GitHub Actions, HashiCorp Vault, and Azure AD.
• Oversee onboarding and compliance of web application firewall solutions including Imperva API Security and DDoS/WAAP protection.
• Validate controls for privileged access management using tools such as CyberArk.
• Ensure compliance with data classification, encryption standards, and endpoint protection policies.

Who We Are Looking For

Technical Skills & Work Experience

• Bachelor's in Engineering, Computer Science, or equivalent; certifications in CISA, CISSP, or ISO 27001 are a plus.
• 10–18 years of experience in technology audit, risk management, or compliance, preferably in insurance or financial services.
• Strong understanding of GCP, CI/CD pipelines, DevSecOps, and infrastructure as code.
• Experience with tools such as Checkmarx, GitHub, Azure AD, HashiCorp Vault, CyberArk, and Imperva.
• Familiarity with SQL and NoSQL databases, encryption standards, and data classification frameworks.
• Proven ability to lead cross‑functional audit engagements and manage stakeholder expectations.

Personal Traits

• Strategic thinker with strong analytical and investigative skills.
• High integrity and ethical standards.
• Excellent communication and presentation skills.
• Ability to work independently and manage multiple concurrent audits.
• Strong attention to detail and documentation discipline.

What Can Make You Extra Special

• Experience in setting up audit functions in greenfield environments.
• Exposure to IRDAI audits and regulatory inspections.
• Familiarity with centralised vulnerability dashboards and build breaker enforcement.
• Experience with public‑facing application security, DDoS/WAAP onboarding, and penetration testing workflows.

Language

Fluent written and spoken English

Equal Opportunity Statement

Prudential is an equal‑opportunity employer. We provide equality of opportunity and benefits for all who apply and perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability, part‑time/fixed‑term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third‑party suppliers and allow reasonable adjustments to support people with individual physical or mental health requirements.