Technology Risk & Compliance Lead

Chubb Ltd.; Bengaluru; On-site; INR 3,200,000 - 5,200,000; Full time

Job summary

Chubb India is seeking an IT Infrastructure Compliance Lead to oversee proactive monitoring and execution of SOX ITGCs and broader infrastructure compliance across the IT estate. You will guide architects, engage with PwC, and drive continuous control improvements.

Join a fast‑growing, digitally driven team focused on governance, risk, and compliance across cloud migrations, identity management, and platform modernization in a complex regulatory landscape.

Qualifications

• Experience monitoring and testing ITGCs and IT controls.
• Familiarity with DORA, FCA and Lloyd's reporting obligations.
• Proven ability to work with external auditors (PwC).

Responsibilities

• Monitor design and operating effectiveness of SOX ITGCs across key areas.
• Own end-to-end control lifecycle including evidence collection and remediation.
• Maintain the controls calendar and drive remediation to audit closure.
• Review architecture documents for SOX impact; embed ITGCs at design stage.
• Provide compliance input into cloud migrations and platform upgrades.
• Develop a references framework for architects and platform owners.
• Act as compliance advisor to owners, architects and engineering teams.
• Interface with internal auditors and PwC; report to leadership on status.
• Drive standardisation and training for IT infrastructure teams.
• Operate within regulatory environment including DORA, FCA, Lloyd's.

Skills

SOX ITGCs

IT risk assessment

Cloud compliance

Auditing

Governance & controls

Scripting (SQL, PowerShell)

Tools

CyberArk

SailPoint

Archer

ServiceNow GRC

AWS

Azure

Windows Server

Linux

Oracle

SQL Server

DB2

Job description

About Chubb

Chubb is a world leader in insurance. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. The company is defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb employs approximately 40,000 people worldwide. Additional information can be found at: www.chubb.com.

About Chubb India

At Chubb India, we are on an exciting journey of digital transformation driven by a commitment to engineering excellence and analytics. We are proud to share that we have been officially certified as a Great Place to Work® for the third consecutive year, reflecting the culture at Chubb, where we believe in fostering an environment where everyone can thrive, innovate, and grow. With a team of over 2500 talented professionals, we encourage a start-up mindset that promotes collaboration, diverse perspectives, and a solution-driven attitude. We are dedicated to building expertise in engineering, analytics, and automation, empowering our teams to excel in a dynamic digital landscape.

We offer an environment where you will be part of an organisation that is dedicated to solving real-world challenges in the insurance industry. Together, we will work to shape the future through innovation and continuous learning.

Position Details

Job title: IT Infrastructure Compliance Lead

Hiring location: Bangalore

Employment type: Full-time

Roles Overview

The IT Infrastructure Compliance Lead is a senior position within the Global IT Compliance function, responsible for proactive monitoring and execution of SOX IT General Controls (ITGCs) and broader infrastructure compliance across the EMEA technology estate. The role holder reviews architecture and design documentation to assess SOX impact, guides application owners and infrastructure architects in implementing IT controls by design and serves as the primary interface with internal and external auditors (PwC), risk and compliance functions, and regional infrastructure leads across the UK, US, and the Philippines.

Job Description

• Proactively monitor design and operating effectiveness of SOX ITGCs across logical access, change management, computer operations, segregation of duties, backup, and disaster recovery.
• Own the end-to-end control lifecycle: design, evidence collection, effectiveness testing, deficiency management, and remediation tracking.
• Maintain a structured monitoring calendar for all periodic control activities, including quarterly privileged access reviews and DR tests; identify and elevate control gaps ahead of audit cycles and drive remediation to closure.
• Review infrastructure architecture documents, design proposals, and change requests to assess SOX control implications before implementation; engage at the design stage with architects and engineers to embed ITGCs, preventing control gaps from being introduced through system design.
• Provide compliance input into cloud migrations, platform modernisation, database upgrades, and identity management programmes.
• Develop and maintain a controls reference framework as a practical design guide for architects and platform owners.
• Act as compliance advisor to application owners, infrastructure architects, and engineering teams on ITGC-compliant access models, change workflows, and operational procedures.
• Participate in architecture review boards and governance forums as the designated compliance representative; serve as primary contact for internal audit and PwC for all infrastructure-related SOX testing, evidence requests, and findings management.
• Provide structured reporting to senior leadership on compliance posture, open findings, and remediation status.
• Conduct periodic IT risk assessments and produce decision-ready risk reporting for senior management; assess compliance implications of new technologies and delivery models before adoption.
• Drive standardisation and continuous improvement of the infrastructure compliance programme; develop guidance materials and training for infrastructure and application teams.
• Operate effectively within an evolving regulatory environment, including DORA, FCA requirements, and Lloyd's reporting obligations.
• SOX ITGCs: logical access, change management, computer operations, and segregation of duties.
• Privileged access management tools: CyberArk and/or SailPoint.
• Infrastructure platforms: Windows Server, Linux/AIX, iSeries (AS400), Oracle Database, SQL Server, and DB2.
• Ability to critically assess architecture documents and identify control design implications.
• Cloud compliance principles (AWS, Azure) and shared responsibility model.
• GRC tooling: Archer or ServiceNow GRC.
• Scripting capability (SQL, PowerShell) for control evidence automation.