Deputy IT SOX Compliance Lead

Chubb Life Fund; Philadelphia, Northern (Philadelphia County, KY); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Chubb seeks a Deputy IT SOX Compliance Lead to shape and advance the Technology SOX Compliance program. You will provide strategic oversight, lead ITGC/ITAC design, and partner with Internal/External Audit to ensure rigorous controls across Tech and Finance.

You will mentor a high-performing SOX team, communicate program status to executives, and promote a risk-aware culture with best practices across the organization. Prior IT SOX auditing experience and relevant certifications are required.

Qualifications

• Bachelor’s and/or Master’s degree in Information Systems, Computer Science, Accounting, Finance, or a related field
• 10+ years of progressive leadership experience across enterprise technology disciplines such as application development, information security, strategic planning, risk management, compliance monitoring, IT auditing, or operations
• 5+ years of IT SOX auditing experience with a public accounting firm and/or publicly traded company, with preference for candidates closer to 10 years of SOX auditing experience
• Deep understanding of Sarbanes-Oxley compliance requirements, including IT General Controls, IT Application Controls, and SOC 1 Type 2 reporting standards
• Proven ability to lead and develop high-performing teams in complex, global environments
• Strong influence, negotiation, and stakeholder management skills with senior leaders, auditors, and cross-functional partners
• Excellent written and verbal communication skills for executive audiences
• Ability to manage multiple high-priority initiatives in a fast-paced environment
• Experience with GRC tools such as AuditBoard and cloud control frameworks
• CISA required; CISSP/CRISC/CPA considered a plus

Responsibilities

• Advise on strategic direction and oversight of the Technology SOX program
• Shape and advance the SOX IT Compliance roadmap across control environment
• Build and mentor a high-performing SOX IT compliance team
• Represent the function in governance forums with executive leadership
• Promote a risk-aware culture and SOX best practices
• Lead design, implementation, and monitoring of ITGCs and ITACs
• Support annual SOX IT compliance assessments and testing
• Analyze control results and recommend remediation actions
• Oversee remediation of deficiencies with root cause analysis and action plans
• Partner with internal/external auditors and stakeholders to drive alignment

Skills

SOX leadership

IT auditing

Stakeholder management

Regulatory compliance

GRC tools

Education

Bachelor’s/Master’s in IS/CS/Accounting/Finance

Tools

AuditBoard

Job description

As our Deputy IT SOX Compliance Lead, you will help shape and advance Chubb's Technology SOX Compliance program, bringing both strategic oversight and hands-on expertise to a critical enterprise function. Reporting to the Vice President, Global Leader of SOX IT Compliance, you will serve as a senior subject matter expert, ensuring IT controls are designed, maintained, and executed with rigor across Tech and Finance. Partnering closely with business stakeholders, Internal Audit, and External Audit teams , you will strengthen compliance, improve operational maturity, ensuring a culture of accountability and control excellence. This is a high-impact role where your leadership will influence the effectiveness of a globally recognized financial services organization.

In this role, you will:

• Advise the Global Leader of SOX IT Compliance on strategic direction and hands-on oversight of the Technology SOX program
• Shape and advance the SOX IT Compliance roadmap, driving continuous improvement and maturity across the control environment
• Build, mentor, and develop a high-performing team of SOX IT compliance professionals, fostering accountability, collaboration, and continuous learning
• Represent the SOX IT Compliance function in governance forums, clearly communicating program status, risks, and recommendations to executive leadership
• Champion a risk-aware culture by promoting awareness of SOX compliance requirements and best practices across the organization
• Lead the design, implementation, and monitoring of IT General Controls, IT Application Controls, and SDLC requirements to support SOX compliance
• Support the scoping, planning, and execution of the annual SOX IT compliance assessment, ensuring timely and accurate testing and documentation
• Analyze control results, identify improvement opportunities, and develop actionable remediation recommendations to strengthen the control environment
• Oversee remediation of control deficiencies, ensuring root cause analysis, action plans, and resolution timelines are clearly defined and tracked
• Serve as a key partner to internal, external, and regulatory auditors, while collaborating with process, control, system, and finance stakeholders to drive alignment, accountability, and effective use of emerging technologies and GRC tools

Qualifications

• Bachelor's and/or Master's degree in Information Systems, Computer Science, Accounting, Finance, or a related field
• 10+ years of progressive leadership experience across enterprise technology disciplines such as application development, information security, strategic planning, risk management, compliance monitoring, IT auditing, or operations
• 5+ years of IT SOX auditing experience with a public accounting firm and/or publicly traded company, with preference for candidates closer to 10 years of SOX auditing experience
• Deep understanding of Sarbanes-Oxley compliance requirements, including IT General Controls, IT Application Controls, and SSAE 18 SOC 1 Type 2 reporting standards
• Proven ability to lead and develop high-performing teams in complex, matrixed, global environments
• Strong influence, negotiation, and stakeholder management skills, with the ability to work effectively with senior leaders, auditors, and cross-functional partners without direct authority
• Excellent written and verbal communication skills, including the ability to present complex technical and compliance topics to executive audiences
• Ability to manage multiple high-priority initiatives simultaneously in a fast-paced, dynamic environment
• Experience with GRC tools such as AuditBoard, cloud control frameworks, DevSecOps environments, emerging technologies such as AI, and/or the insurance or financial services industry
• CISA required, with additional certifications such as CISSP, CRISC, or CPA considered a plus

About Us

Chubb is a world leader in insurance. With operations in 54 countries, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance, and life insurance to a diverse group of clients. The company is distinguished by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength, underwriting excellence, superior claims handling expertise and local operations globally.

At Chubb, we are committed to equal employment opportunity and compliance with all laws and regulations pertaining to it. Our policy is to provide employment, training, compensation, promotion, and other conditions or opportunities of employment, without regard to race, color, religious creed, sex, gender, gender identity, gender expression, sexual orientation, marital status, national origin, ancestry, mental and physical disability, medical condition, genetic information, military and veteran status, age, and pregnancy or any other characteristic protected by law. Performance and qualifications are the only basis upon which we hire, assign, promote, compensate, develop and retain employees. Chubb prohibits all unlawful discrimination, harassment and retaliation against any individual who reports discrimination or harassment.

Job Info

• Job Identification 35737
• Job Schedule Full time
• Regular or Temporary Regular
• Job Category Info Security and IT Compliance
• Business Unit United States
• Legal Employer ACE American Insurance Company