Tech Risk & Compliance Lead

About Chubb

Chubb is a world leader in insurance. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. The company is defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb employs approximately 40,000 people worldwide. Additional information can be found at: www.chubb.com.

About Chubb India:

At Chubb India, we are on an exciting journey of digital transformation driven by a commitment to engineering excellence and analytics. We are proud to share that we have been officially certified as a Great Place to Work® for the third consecutive year, reflecting the culture at Chubb, where we believe in fostering an environment where everyone can thrive, innovate, and grow. With a team of over 2500 talented professionals, we encourage a start-up mindset that promotes collaboration, diverse perspectives, and a solution-driven attitude. We are dedicated to building expertise in engineering, analytics, and automation, empowering our teams to excel in a dynamic digital landscape.

We offer an environment where you will be part of an organisation that is dedicated to solving real-world challenges in the insurance industry. Together, we will work to shape the future through innovation and continuous learning.

Position Details

Job title: IT Infrastructure Compliance Lead

Hiring location: Bangalore

Employment type: Full-time

Roles Overview

The IT Infrastructure Compliance Lead is a senior position within the Global IT Compliance function, responsible for proactive monitoring and execution of SOX IT General Controls (ITGCs) and broader infrastructure compliance across the EMEA technology estate. The role holder reviews architecture and design documentation to assess SOX impact, guides application owners and infrastructure architects in implementing IT controls by design and serves as the primary interface with internal and external auditors (PwC), risk and compliance functions, and regional infrastructure leads across the UK, US, and the Philippines.

Job Description:

• Proactively monitor design and operating effectiveness of SOX ITGCs across logical access, change management, computer operations, segregation of duties, backup, and disaster recovery.

• Own the end-to-end control lifecycle: design, evidence collection, effectiveness testing, deficiency management, and remediation tracking.

• Maintain a structured monitoring calendar for all periodic control activities, including quarterly privileged access reviews and DR tests; identify and escalate control gaps ahead of audit cycles and drive remediation to closure.

• Review infrastructure architecture documents, design proposals, and change requests to assess SOX control implications before implementation; engage at the design stage with architects and engineers to embed ITGCs, preventing control gaps from being introduced through system design.

• Provide compliance input into cloud migrations, platform modernisation, database upgrades, and identity management programmes.

• Develop and maintain a controls reference framework as a practical design guide for architects and platform owners.

• Act as compliance advisor to application owners, infrastructure architects, and engineering teams on ITGC-compliant access models, change workflows, and operational procedures.

• Participate in architecture review boards and governance forums as the designated compliance representative; serve as primary contact for internal audit and PwC for all infrastructure-related SOX testing, evidence requests, and findings management.

• Provide structured reporting to senior leadership on compliance posture, open findings, and remediation status.

• Conduct periodic IT risk assessments and produce decision-ready risk reporting for senior management; assess compliance implications of new technologies and delivery models before adoption.

• Drive standardisation and continuous improvement of the infrastructure compliance programme; develop guidance materials and training for infrastructure and application teams.

• Operate effectively within an evolving regulatory environment, including DORA, FCA requirements, and Lloyd's reporting obligations.

• SOX ITGCs: logical access, change management, computer operations, and segregation of duties.

• Privileged access management tools: CyberArk and/or SailPoint.

• Infrastructure platforms: Windows Server, Linux/AIX, iSeries (AS400), Oracle Database, SQL Server, and DB2.

• Ability to critically assess architecture documents and identify control design implications.

• Cloud compliance principles (AWS, Azure) and shared responsibility model.

• GRC tooling: Archer or ServiceNow GRC.

• Scripting capability (SQL, PowerShell) for control evidence automation.

Qualifications/Key requirements:

• 6 to 12 years in IT infrastructure compliance, IT audit, or technology risk within financial services, insurance, or Big 4.

• Proven ownership of SOX ITGC programmes, including proactive monitoring and deficiency remediation.

• Track record of reviewing architectural artefacts from a compliance perspective and guiding technical teams on control implementation.

• Prior engagement with Big 4 external audit at a senior client-side level, or equivalent auditor-side experience.

• Required: Bachelor’s degree in computer science, Information Technology, or a related discipline.

• Preferred: Certified Information Systems Auditor (CISA).

• Advantageous: CRISC, CISM, or equivalent professional qualification.

Why Chubb?

 Join Chubb to be part of a leading global insurance company!

Our constant focus on employee experience, along with a start-up-like culture, empowers you to achieve impactful results.

· Industry leader: Chubb is a world leader in the insurance industry, powered by underwriting and engineering excellence

· A Great Place to work: Chubb India has been recognised as a Great Place to Work® for the years 2023-2024, 2024-2025 and 2025-2026

· Laser focus on excellence: At Chubb, we pride ourselves on our culture of greatness, where excellence is a mindset and a way of being. We constantly seek new and innovative ways to excel at work and deliver outstanding results

· Start-Up Culture: Embracing the spirit of a start-up, our focus on speed and agility enables us to respond swiftly to market requirements, while a culture of ownership empowers employees to drive results that matter

· Growth and success: As we continue to grow, we are steadfast in our commitment to provide our employees with the best work experience, enabling them to advance their careers in a conducive environment

Employee Benefits

Our company offers a comprehensive benefits package designed to support our employees’ health, well-being, and professional growth. Employees enjoy flexible work options, generous paid time off, and robust health coverage, including treatment for dental and vision-related requirements. 

We invest in the future of our employees through continuous learning opportunities and career advancement programs, while fostering a supportive and inclusive work environment. Our benefits include:

· Savings and Investment plans: We provide specialised benefits like Corporate NPS (National Pension Scheme), Employee Stock Purchase Plan (ESPP), Long-Term Incentive Plan (LTIP), Retirement Benefits and Car Lease that help employees optimally plan their finances

· Upskilling and career growth opportunities: With a focus on continuous learning, we offer customised programs that support upskilling, like Education Reimbursement Programs, Certification programs and access to global learning programs.

· Health and Welfare Benefits: We care about our employees’ well-being in and out of work and have benefits like Employee Assistance Program (EAP), Yearly Free Health campaigns and comprehensive Insurance benefits.

Application Process

Our recruitment process is designed to be transparent and inclusive.

· Step 1: Submit your application via the Chubb Careers Portal.

· Step 2: Engage with our recruitment team for an initial discussion.

· Step 3: Final interaction with Chubb leadership.

Join Us

With you, Chubb is better. Whether you are solving challenges on a global stage or creating innovative solutions for local markets, your contributions will help shape the future. If you value integrity, innovation, and inclusion, and are ready to make a difference, we invite you to be part of Chubb India’s journey.

Apply Now: Chubb External Careers https://www.chubb.com/emea-careers/