Deputy IT SOX Compliance Lead
As our Deputy IT SOX Compliance Lead, you will help shape and advance Chubb’s Technology SOX Compliance program, bringing both strategic oversight and hands-on expertise to a critical enterprise function. Reporting to the Vice President, Global Leader of SOX IT Compliance, you will serve as a senior subject matter expert, ensuring IT controls are designed, maintained, and executed with rigor across Tech and Finance. Partnering closely with business stakeholders, Internal Audit, and External Audit teams , you will strengthen compliance, improve operational maturity, ensuring a culture of accountability and control excellence. This is a high-impact role where your leadership will influence the effectiveness of a globally recognized financial services organization.
In this role, you will:
- Advise the Global Leader of SOX IT Compliance on strategic direction and hands-on oversight of the Technology SOX program
- Shape and advance the SOX IT Compliance roadmap, driving continuous improvement and maturity across the control environment
- Build, mentor, and develop a high-performing team of SOX IT compliance professionals, fostering accountability, collaboration, and continuous learning
- Represent the SOX IT Compliance function in governance forums, clearly communicating program status, risks, and recommendations to executive leadership
- Champion a risk-aware culture by promoting awareness of SOX compliance requirements and best practices across the organization
- Lead the design, implementation, and monitoring of IT General Controls, IT Application Controls, and SDLC requirements to support SOX compliance
- Support the scoping, planning, and execution of the annual SOX IT compliance assessment, ensuring timely and accurate testing and documentation
- Analyze control results, identify improvement opportunities, and develop actionable remediation recommendations to strengthen the control environment
- Oversee remediation of control deficiencies, ensuring root cause analysis, action plans, and resolution timelines are clearly defined and tracked
- Serve as a key partner to internal, external, and regulatory auditors, while collaborating with process, control, system, and finance stakeholders to drive alignment, accountability, and effective use of emerging technologies and GRC tools
- Bachelor’s and/or Master’s degree in Information Systems, Computer Science, Accounting, Finance, or a related field
- 10+ years of progressive leadership experience across enterprise technology disciplines such as application development, information security, strategic planning, risk management, compliance monitoring, IT auditing, or operations
- 5+ years of IT SOX auditing experience with a public accounting firm and/or publicly traded company, with preference for candidates closer to 10 years of SOX auditing experience
- Deep understanding of Sarbanes-Oxley compliance requirements, including IT General Controls, IT Application Controls, and SSAE 18 SOC 1 Type 2 reporting standards
- Proven ability to lead and develop high-performing teams in complex, matrixed, global environments
- Strong influence, negotiation, and stakeholder management skills, with the ability to work effectively with senior leaders, auditors, and cross-functional partners without direct authority
- Excellent written and verbal communication skills, including the ability to present complex technical and compliance topics to executive audiences
- Ability to manage multiple high-priority initiatives simultaneously in a fast-paced, dynamic environment
- Experience with GRC tools such as AuditBoard, cloud control frameworks, DevSecOps environments, emerging technologies such as AI, and/or the insurance or financial services industry
- CISA required, with additional certifications such as CISSP, CRISC, or CPA considered a plus