Deputy, IT SOX Compliance Lead

Chubb; Monterrey; Presencial; MXN 1.100.000 - 1.900.000; Jornada completa

Descripción de la vacante

Chubb seeks a Deputy, IT SOX Compliance Lead to mature and drive Chubb's technology SOX controls. The role partners with Internal and External Audit, governance, and business stakeholders to elevate the control environment and assurance maturity.

Seeking a strategic leader with 10+ years in tech leadership and 5+ years in IT SOX auditing, capable of influencing across a global organization and driving continuous improvements in ITGCs, ITACs, and SDLC processes.

Formación

• 10+ years of progressive leadership experience across enterprise technology disciplines.
• 5+ years of relevant IT SOX auditing experience with a public company or public accounting firm.
• Deep understanding of Sarbanes-Oxley compliance including ITGCs, ITACs, and SOC 1 Type 2 reporting.

Responsabilidades

• Lead design, implementation, and monitoring of ITGCs and ITACs to ensure SOX compliance.
• Scope, plan, and execute annual SOX IT compliance assessments with timely testing and documentation.
• Remediate control deficiencies with root-cause analysis and remediation action plans.
• Act as primary liaison with internal and external auditors and governance forums.

Conocimientos

Leadership

SOX IT Compliance

ITGCs

Stakeholder Mgmt

Auditing

Strategic Planning

Educación

Bachelor's degree in Information Systems / CS / Accounting

Herramientas

AuditBoard

Descripción del empleo

Job Description

Chubb is seeking a highly experienced and strategic Deputy, IT SOX Compliance Lead to support the management and continued maturation of Chubb's Technology SOX Compliance program. Reporting to the Vice President, Global Leader of SOX IT Compliance, this role will serve as a key senior contributor and subject matter expert in ensuring adherence to all applicable IT controls. It will act as a trusted partner to business stakeholders, Internal Audit, and External Audit teams, playing a critical role in driving compliance excellence and operational maturity across the organization. This position offers a unique opportunity to lead high-impact initiatives within a globally recognized financial services organization.

Qualifications

Leadership & Strategy

• Serve as a lead and subject matter expert within the SOX IT Compliance function, providing strategic direction and hands-on oversight of the Technology SOX program.
• Contribute to the strategic vision and roadmap for the SOX IT Compliance program, driving continuous improvement and maturation of the control environment.
• Build, mentor, and develop a high-performing team of SOX IT compliance professionals, fostering a culture of accountability, collaboration, and continuous learning.
• Represent the SOX IT Compliance function in governance forums, effectively communicating program status, risks, and recommendations to executive leadership.
• Champion a risk-aware culture across the organization by promoting awareness of SOX compliance requirements and best practices.

SOX Program Management

• Lead and oversee the design, implementation, and monitoring of IT General Controls (ITGCs), IT Application Controls (ITACs), and Software Development Lifecycle (SDLC) requirements to ensure SOX compliance.
• Drive the scoping, planning, and execution of the annual SOX IT compliance assessment, ensuring timely and accurate completion of all testing and documentation activities.
• Analyze control results and identify opportunities for continuous improvement of the SOX control environment, developing actionable recommendations for remediation and enhancement.
• Oversee the remediation of control deficiencies identified by auditors, ensuring appropriate root cause analysis and action plans are defined, tracked, and resolved in a timely manner.

Audit & Stakeholder Management

• Serve as a key point of contact and partner for internal, external, and regulatory auditors on the scope, depth, risks, and results of technology audits.
• Partner and negotiate with audit teams on control design, testing approaches, and findings to ensure balanced and pragmatic outcomes.
• Collaborate with process, control, and system owners across the organization to drive alignment and accountability for SOX compliance obligations.
• Maintain accountability towards the Finance organization, ensuring technology controls are aligned with financial reporting requirements and finance stakeholders are kept informed of compliance posture and open findings.
• Oversee the review and evaluation of SOC 1 Type 2 reports to assess vendor SOX compliance and determine appropriate reliance on third-party systems and services.
• Evaluate and assess emerging technologies and evolving processes (e.g., DevSecOps, cloud environments, AI / large language models) and provide authoritative control guidance.
• Stay current on regulatory changes, industry trends, and technological advancements that may impact the SOX IT compliance landscape, proactively advising leadership on potential risks and opportunities.
• Drive the optimization and effective utilization of GRC tools (e.g., AuditBoard) to enhance program efficiency, reporting capabilities, and overall compliance monitoring.

Qualifications / Key Requirements

Required

• 10+ years of progressive leadership experience across enterprise technology disciplines, including one or more of the following: application development, information security, strategic planning, risk management, compliance monitoring, IT auditing, or operations.
• 5+ years of relevant IT SOX auditing experience with a public accounting firm and/or a publicly traded company. Preference will be given to candidates with closer to 10 years of SOX auditing experience.
• Deep, demonstrable understanding of Sarbanes-Oxley compliance requirements, including IT General Controls (ITGCs), IT Application Controls (ITACs), and SSAE 18 (SOC 1 Type 2) reporting standards.
• Proven track record of leading and developing high-performing teams in a complex, matrixed, and global organizational environment.
• Demonstrated ability to influence and negotiate with senior stakeholders, auditors and cross-functional leaders without direct authority.
• Strong executive presence with excellent written and verbal communication skills, including the ability to present complex technical and compliance topics to executive-level audiences.
• Proven ability to manage multiple high-priority initiatives simultaneously in a dynamic, fast-paced environment.

Preferred

• Experience working with GRC tools such as AuditBoard or similar platforms.
• Familiarity with cloud control frameworks, DevSecOps environments, and emerging technologies such as AI.
• Prior experience in the insurance or financial services industry.
• Experience working in a large, global, publicly traded organization.

Education

• Bachelor's degree (B.S.) or Master's degree in Information Systems, Computer Science, Accounting, Finance, or a related field.

Certifications

• Certified Information Systems Auditor (CISA)
• Additional relevant certifications (e.g., CISSP, CRISC, CPA) are a plus