Tech Risk & Compliance Lead

Responsibilities

• Design, document, and implement SOX-compliant IT General Controls (ITGCs) covering logical access, change management, and segregation of duties.
• Perform control design and operating-effectiveness testing across the EMEA technology estate.
• Review infrastructure architecture and design proposals to embed controls-by-design and prevent compliance gaps.
• Ensure compliance with GDPR and DORA by embedding technical and organizational controls into infrastructure design.
• Manage the end-to-end deficiency remediation process, including root-cause analysis.
• Act as the primary interface for internal and external auditors (e.g., PwC) regarding infrastructure-related SOX testing.
• Provide structured reporting to senior leadership on compliance posture and risk assessments.

Requirements

• Minimum 5 years of experience in IT compliance, IT audit, or technology risk within financial services or insurance.
• Proven experience owning SOX ITGC programs and managing deficiency remediation.
• Technical proficiency with privileged access management tools such as CyberArk or SailPoint.
• Working knowledge of infrastructure platforms including Windows Server, Linux, and Oracle Database.
• Strong understanding of EU regulatory frameworks, specifically GDPR and DORA.
• Bachelor's degree in Computer Science, Information Technology, or a related discipline.

Preferred Qualifications

• Certified Information Systems Auditor (CISA) designation.
• Professional qualifications such as CRISC or CISM.

Benefits

• Competitive salary and pension scheme.
• Discretionary bonus scheme.
• Hybrid working options.
• Private Medical cover and Life Assurance.
• 25 days annual leave with the option to purchase additional days.
• Employee Share Purchase Plan and subsidized gym membership.
• Comprehensive learning and development offerings.

About the Company

Chubb is a leading global insurance company. We are committed to integrity, client focus, respect, excellence, and teamwork, fostering a collaborative and supportive environment that values diversity and inclusion.