C

Chubb

Global property & casualty insurer

IT SOX Compliance Lead

Internal Audit & ControlsConfirmed live in the last 24 hours
Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

  • 12+ years of progressive leadership experience across enterprise technology disciplines, including one or more of application development, information security, strategic planning, risk management, compliance monitoring, IT auditing, or operations.
  • 8+ years of relevant IT SOX auditing experience with a public accounting firm and/or a publicly traded company.
  • A deep, demonstrable understanding of Sarbanes-Oxley compliance requirements, including IT General Controls (ITGCs), IT Application Controls (ITACs), and SSAE 18 (SOC 1 Type 2) reporting standards.
  • A proven track record of leading and developing high-performing teams in a complex, matrixed, and global organizational environment.
  • The ability to influence and negotiate with senior stakeholders, auditors, and cross-functional leaders without direct authority.
  • Strong written and verbal communication skills, including the ability to present complex technical and compliance topics to executive-level audiences.
  • The ability to manage multiple high-priority initiatives simultaneously in a dynamic, fast-paced environment.
  • A bachelor's or master's degree in Information Systems, Computer Science, Accounting, Finance, or a related field.
  • Certified Information Systems Auditor (CISA).

Responsibilities

  • Serve as a lead and subject matter expert within the SOX IT Compliance function, providing strategic direction and hands-on oversight of the Technology SOX program.
  • Contribute to the strategic vision and roadmap for the SOX IT Compliance program, driving continuous improvement and maturation of the control environment.
  • Build, mentor, and develop a high-performing team of SOX IT compliance professionals, fostering accountability, collaboration, and continuous learning.
  • Represent the SOX IT Compliance function in governance forums, communicating program status, risks, and recommendations to executive leadership.
  • Promote awareness of SOX compliance requirements and best practices to champion a risk-aware culture across the organization.
  • Lead and oversee the design, implementation, and monitoring of IT General Controls (ITGCs), IT Application Controls (ITACs), and Software Development Lifecycle (SDLC) requirements to ensure SOX compliance.
  • Drive the scoping, planning, and execution of the annual SOX IT compliance assessment, ensuring timely and accurate completion of testing and documentation activities.
  • Analyze control results and identify opportunities to improve the SOX control environment, developing actionable remediation and enhancement recommendations.
  • Oversee remediation of control deficiencies identified by auditors, ensuring root cause analysis and action plans are defined, tracked, and resolved in a timely manner.
  • Serve as a key point of contact and partner for internal, external, and regulatory auditors on the scope, depth, risks, and results of technology audits.
  • Partner and negotiate with audit teams on control design, testing approaches, and findings to achieve balanced and pragmatic outcomes.
  • Collaborate with process, control, and system owners across the organization to drive alignment and accountability for SOX compliance obligations.
  • Maintain accountability to the Finance organization, align technology controls with financial reporting requirements, and keep finance stakeholders informed of compliance posture and open findings.
  • Oversee the review and evaluation of SOC 1 Type 2 reports to assess vendor SOX compliance and determine appropriate reliance on third-party systems and services.
  • Evaluate emerging technologies and evolving processes, including DevSecOps, cloud environments, and artificial intelligence or large language models, and provide authoritative control guidance.
  • Stay current on regulatory changes, industry trends, and technological advancements that may affect the SOX IT compliance landscape, advising leadership on potential risks and opportunities.
  • Drive optimization and effective utilization of governance, risk, and compliance (GRC) tools such as AuditBoard to enhance program efficiency, reporting capabilities, and compliance monitoring.

Desired Qualifications

  • Experience working with governance, risk, and compliance (GRC) tools such as AuditBoard or similar platforms.
  • Familiarity with cloud control frameworks, DevSecOps environments, and emerging technologies such as artificial intelligence.
  • Prior experience in the insurance or financial services industry.
  • Experience working in a large, global, publicly traded organization.
  • Closer to 10 years of SOX auditing experience.
  • Additional relevant certifications such as CISSP, CRISC, or CPA.

About the Company

Chubb

Global property & casualty insurer

Chubb is the world’s largest publicly traded property and casualty insurer, offering commercial and personal insurance, reinsurance, life and health products across 54 countries. It underwrites policies by evaluating risk, pricing premiums, and paying claims fairly and promptly when covered events occur. Its breadth of products, extensive distribution, and strong financial position distinguish it from competitors and enable it to serve diverse clients globally. Its goal is to help people and businesses manage risk with clear policy terms and reliable financial protection.

Company size
10,001+
Company stage
IPO
Headquarters
Zurich, Switzerland
Founded
1985

Recently Posted Jobs

Explore more opportunities at Chubb

See more jobs