PHI - Lead- Tech Audit

Prudential Hong Kong Limited; Mumbai; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

A leading insurance firm is seeking a Tech Audit Lead in Mumbai to establish and lead the technology audit function. The ideal candidate will have 10–18 years of experience in technology audit or risk management and be well-versed in compliance with regulatory frameworks. Responsibilities include conducting risk-based audits and collaborating with InfoSec teams. This full-time role requires working from the office only.

Qualifications

• 10–18 years of experience in technology audit, risk management, or compliance.
• Proven ability to lead cross-functional audit engagements.
• Strong understanding of GCP and CI/CD pipelines.

Responsibilities

• Establish and lead the technology audit function.
• Conduct risk-based audits across infrastructure and applications.
• Collaborate with InfoSec and DevSecOps teams on vulnerabilities.
• Collaborate with InfoSec, DevSecOps, and AppSec teams to validate remediation of vulnerabilities and patch compliance.
• Lead privacy impact assessments, penetration testing reviews, and security onboarding for new applications.
• Monitor and report on the implementation of audit recommendations and track remediation progress.
• Maintain documentation and audit logs per Professional standards and Prudential Group policies.
• Support investigations into technology incidents or compliance failures; present findings to senior leadership.
• Stay updated on regulatory changes and best practices in technology audit and governance.

Skills

Technology audit

Risk management

Compliance

Analytical skills

Communication

Audit leadership

Education

Bachelor's in Engineering or Computer Science

Certifications in CISA, CISSP, or ISO 27001

Tools

Checkmarx

GitHub

HashiCorp Vault

CyberArk

Imperva

Imperva

Job description

PHI - Lead- Tech Audit page is loaded## PHI - Lead- Tech Auditlocations: Mumbaitime type: Full timeposted on: Posted Todayjob requisition id: 25090110Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.**About the Job**Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured—for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.At **Prudential Health India (PHI)**, we are on a mission to make Indians healthier, while bridging the health protection gap. This is a Zero-to-One team undertaking a greenfield health insurance deployment in India committed to building journeys that truly empathise with the customer and offer a differentiated, bespoke experience.To partner us in this mission, we are looking for a talented candidate for the role of…**Tech Audit Lead****Note:** The title will depend on (1) Experience (2) Expertise and (3) Performance. So the title could be:* Tech Audit Lead* Senior Tech Audit Lead* (Associate Director) Technology Audit**People Manager Role****Experience:** 10–18 years **Location:** Mumbai **Work Mode:** Work from office only**Job Profile Summary**The Tech Audit Lead will be responsible for establishing and leading the technology audit function at PHI, ensuring compliance with internal policies, regulatory frameworks (IRDAI, GDPR, HIPAA), and global Prudential standards. This role will oversee audit trails, vulnerability management, and risk mitigation across PHI’s cloud-native infrastructure and applications.**Job Description*** Develop and implement a comprehensive technology audit strategy and annual audit plan aligned with PHI’s business and regulatory requirements.* Conduct risk-based audits across infrastructure, applications, data platforms, and security controls.* Ensure complete and tamper-proof **audit trails** of user activities, data changes, and system events.* Collaborate with InfoSec, DevSecOps, and AppSec teams to validate remediation of vulnerabilities and ensure patch compliance.* Lead **privacy impact assessments**, **penetration testing reviews**, and **security onboarding** for new applications.* Monitor and report on the implementation of audit recommendations and track remediation progress.* Maintain documentation and audit logs in accordance with professional standards and Prudential Group policies.* Support investigations into technology-related incidents, control breaches, or compliance failures.* Present audit findings and risk assessments to senior leadership and the Audit Committee.* Stay updated on emerging risks, regulatory changes, and best practices in technology audit and governance.**Security & Compliance Technologies*** Implement and audit **SAST**, **DAST**, and **SCA** scanning tools and processes.* Ensure secure integration of CI/CD pipelines using **Checkmarx**, **GitHub**, **GitHub Actions**, **HashiCorp Vault**, and **Azure AD**.* Oversee onboarding and compliance of **WAF (Web Application Firewall)** solutions including **Imperva API Security** and **DDoS/WAAP protection**.* Validate controls for **privileged access management** using tools like **CyberArk**.* Ensure compliance with **data classification**, **encryption standards**, and **endpoint protection** policies.**Who We Are Looking For****Technical Skills & Work Experience*** Bachelor's in Engineering, Computer Science, or equivalent; certifications in CISA, CISSP, or ISO 27001 are a plus.* 10–18 years of experience in technology audit, risk management, or compliance, preferably in insurance or financial services.* Strong understanding of **GCP**, **CI/CD pipelines**, **DevSecOps**, and **infrastructure as code**.* Experience with tools such as **Checkmarx**, **GitHub**, **Azure AD**, **HashiCorp Vault**, **CyberArk**, and **Imperva**.* Familiarity with **SQL and NoSQL databases**, encryption standards, and data classification frameworks.* Proven ability to lead cross-functional audit engagements and manage stakeholder expectations.**Personal Traits*** Strategic thinker with strong analytical and investigative skills.* High integrity and ethical standards.* Excellent communication and presentation skills.* Ability to work independently and manage multiple concurrent audits.* Strong attention to detail and documentation discipline.**What Can Make You Extra Special*** Experience in setting up audit functions in greenfield environments.* Exposure to IRDAI audits and regulatory inspections.* Familiarity with centralised vulnerability dashboards and build breaker enforcement.* Experience with public-facing application security, DDoS/WAAP onboarding, and penetration testing workflows.**Language**Fluent written and spoken English**Equal Opportunity Statement**Prudential is an equal opportunity employer. We provide equality of opportunity and benefits for all who apply and perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability, part-time/fixed-term work, or any other status protected by applicable law. **Prudential is an equal opportunity employer.** We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.Prudential plc provides life and health insurance and asset management to 18 million customers across 24 markets in Asia and Africa.We are headquartered in London and Hong Kong and are focused on four strategic regions: Greater China, ASEAN, India and Africa. We are served by around 68,000 average monthly active agents and more than 200 bank partners.Prudential plc is not affiliated in any manner with Prudential Financial, Inc., a company whose principal place of business is in the United States of America or with the Prudential Assurance Company, a subsidiary of M&G plc, a company incorporated in the United Kingdom.Find out more atFollow us on LinkedIn