Working within the EMEA IT Compliance team, the IT Infrastructure Compliance Lead position is a key strategic role within the compliance and regulatory framework for Chubb EMEA.
Liaising with key stakeholders including regional Infrastructure Leads (based in UK, US and Philippines), external auditors (PWC), internal audit, global risk & compliance. The IT Infra Compliance Lead will be the main point of contact and SME for the regional EMEA IT infrastructure compliance and be responsible for setting up the process for implementing, testing design and operating effectiveness and monitoring IT controls and leading on the remediation activities.
The EMEA IT infrastructure team are responsible for delivering and maintaining the IT infrastructure controls hosted within the EMEA region by the various insurance lines of business, which is a highly regulated market with oversight from the FCA & PRA in the UK and the ACPR in France. As a publicly quoted company Sarbanes Oxley (SOX) rules also apply and there are internal controls and audit impacts both as a Financial Institution and as a technology organisation, with further regulation coming from the Digital Operational Resilience Act (DORA) that is being implemented.
The successful candidate will be responsible for the oversight and delivery of all IT risk, compliance and audit activities related to IT infrastructure and act as the primary liaison with internal and external audit partners to ensure the EMEA IT infrastructure and systems are in compliance with all risk, compliance and audit requirements in the increasing & changing regulatory and security environment.
The role requires a combination of SME knowledge (SOX ITGC controls, governance, compliance, risk management & best practice), the ability to articulate, communicate & prioritise to others, and the capability to project manage and drive change in order to raise standards, address weaknesses, and implement and continual improve the infrastructure compliance environment, working closely with the relevant system owners and partners in the business teams.
Strong Knowledge of Infrastructure SOX key controls including privileged access review over SQL, Oracle, DB2, iSeries, Linux/AIX, Backup & Disaster recovery, change management, segregation of duties, Experience with privileged access vaulting tools (CyberArk, SailPoint) is a must have.
The role requires strong IT SOX, regulatory and infrastructure experience and will suit someone with either finance/technical controls experience, preferably within a Financial Services institution or a Big4.
