About Chubb

Chubb is a world leader in insurance. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. The company is defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P; 500 index. Chubb employs approximately 40,000 people worldwide.

Additional information can be found at: www.chubb.com.

About Chubb India

At Chubb India, we are on an exciting journey of digital transformation driven by a commitment to engineering excellence and analytics. We are proud to share that we have been officially certified as a Outstanding Place to Work® for the third consecutive year, a reflection of the culture at Chubb where we believe in fostering an workplace where everyone can thrive, innovate, and grow

With a team of over 2500 talented professionals, we encourage a start-up mindset that promotes collaboration, diverse perspectives, and a solution-driven attitude. We are dedicated to building expertise in engineering, analytics, and automation, empowering our teams to excel in a dynamic digital landscape.

We offer an environment where you will be part of an organization that is dedicated to solving real-world challenges in the insurance industry. Together, we will work to shape the future through innovation and continuous learning.

Role Purpose The Senior Manager - Risk and Compliance is a senior role within the Chubb Business Services India (CBSI) Risk and Compliance function, accountable for managing both technology risk and operational/entity risk for CBSI. The ideal candidate will be expected to focus on Technology Risk Management - including oversight and execution of IT General Controls (ITGC) testing, SOX compliance, and IT risk monitoring while also covering Entity-Level Operational Risk Management, encompassing RCSA, business continuity, issue management, risk reporting to senior management,



and end-to-end audit lifecycle coordination. The role holder acts as a trusted risk advisor to site leaders, function heads, and technology teams, and drives continuous improvement of the Risk and Compliance programme.

Key Responsibilities

- Technology Risk Management

- Plan, coordinate and execute SOX ITGC testing across logical access, change management, computer operations, segregation of duties, backup, and disaster recovery; own the end-to-end ITGC control lifecycle including evidence collection, deficiency management, and remediation tracking.
- Maintain a structured monitoring calendar for all periodic ITGC activities; proactively identify and escalate control gaps ahead of audit cycles and drive remediation to closure.
- Conduct periodic IT risk assessments across the CBSI technology estate and produce risk reporting and decision-ready updates for senior management.
- Serve as the primary CBSI interface for technology-related audit and assurance engagements, coordinating with internal audit, Group, and external auditors on all IT-scoped reviews.
- Review technology change initiatives and infrastructure proposals from a risk and controls perspective; embed controls-by-design thinking in relevant technology programmes.
- Track IT audit findings and management actions to evidenced closure within agreed timelines; escalate at-risk items proactively.

2. Operational Risk and Entity Risk Management

- Plan and conduct RCSA exercises across all key CBSI business functions; ensure results are documented, risk-rated, and shared with functional heads with agreed remediation plans.
- Develop and maintain a comprehensive Risk Register capturing all open risks with owner, rating, root cause, remediation plan,



and closure status; escalate High or Critical risks to senior management within agreed timelines.
- Manage the end-to-end Business Continuity Management (BCM) and Business Impact Analysis (BIA) process for CBSI in alignment with the Global BCM framework; ensure critical functions have documented, signed-off recovery plans and that the emergency call tree is tested at least twice annually.
- Produce and publish a monthly Risk Scorecard covering CBSI's current risk profile - open risks, ratings, top risks, audit action status, BCM status, and compliance filing status - with trend analysis and a leadership dashboard view.
- Coordinate the full audit lifecycle for all internal and external audits: maintain continuous audit readiness, own tracking of management action items, drive evidenced closure, and escalate at-risk actions.
- Conduct periodic assurance reviews across key business processes to identify control gaps ahead of formal audits; engage first-line function owners on agreed remediation actions.

Experience

- 10-15 years of experience in technology/IT risk, IT audit, operational risk, or a combined risk and compliance function, preferably within financial services, insurance, or a Big 4 firm.
- Demonstrable and balanced experience across both technology risk (ITGC, SOX testing, IT audit) and operational risk management (RCSA, BCM, issue management, risk reporting).
- Proven ownership of audit readiness, audit lifecycle coordination, and management action remediation at a senior level.
- Exposure to India entity-level regulatory requirements; familiarity with DPDP or equivalent data protection frameworks is advantageous.

- Knowledge and Skills
- Strong working knowledge of ITGC domains, SOX control testing methodology, and IT audit concepts.
- Sound understanding of operational risk frameworks - RCSA methodology, BCM, issue management, and executive risk reporting.
- Excellent stakeholder management, facilitation, report writing, and executive communication skills.
- Familiarity with GRC tooling (e.g., Archer, ServiceNow GRC) and openness to adopting AI and digital tools to streamline risk and compliance processes.

📌 Senior Manager - Risk and Compliance (Hyderabad)
🏢 Chubb
📍 Hyderabad