# Lead- Tech Risk

**Company**: Prudential Health India (PHI)
**Location**: Mumbai
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Category**: IT
**Industry**: Finance

**Apply**: https://prudential.wd3.myworkdayjobs.com/en-US/prudential/job/Mumbai/PHI---Lead--Tech-Risk_25090112?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_3351f74e-134

## Description

Prudential Health India (PHI) is seeking a talented candidate for the role of Lead- Tech Risk. The successful candidate will develop and implement a comprehensive technology Risk strategy and annual Risk plan aligned with PHI's business and regulatory requirements.

**Responsibilities:**

- Develop and implement a comprehensive technology Risk strategy and annual Risk plan aligned with PHI's business and regulatory requirements.

- Conduct risk-based Risks across infrastructure, applications, data platforms, and security controls.

- Ensure complete and tamper-proof Risk trails of user activities, data changes, and system events.

- Collaborate with InfoSec, DevSecOps, and AppSec teams to validate remediation of vulnerabilities and ensure patch compliance.

- Lead privacy impact assessments, penetration testing reviews, and security onboarding for new applications.

- Monitor and report on the implementation of Risk recommendations and track remediation progress.

- Maintain documentation and Risk logs in accordance with professional standards and Prudential Group policies.

- Support investigations into technology-related incidents, control breaches, or compliance failures.

- Present Risk findings and risk assessments to senior leadership and the Risk Committee.

- Stay updated on emerging risks, regulatory changes, and best practices in technology Risk and governance.

- Develop and maintain risk registers and mitigation plans.

- Monitor emerging risks (cloud, AI, third-party integrations).

- Collaborate with architecture and security teams to embed controls.

- Support risk reporting and governance forums.

- Conduct impact analysis and scenario modelling.

- Align risk controls with Prudential Group standards and regulatory expectations.

- Work with product and engineering teams to ensure risk-aware design and delivery.

- Maintain risk dashboards, metrics, and control effectiveness reports.

**Security & Compliance Technologies:**

- Implement and Risk SAST, DAST, and SCA scanning tools and processes.

- Ensure secure integration of CI/CD pipelines using Checkmarx, GitHub, GitHub Actions, HashiCorp Vault, and Azure AD.

- Oversee onboarding and compliance of WAF (Web Application Firewall) solutions including Imperva API Security and DDoS/WAAP protection.

- Validate controls for privileged access management using tools like CyberArk.

- Ensure compliance with data classification, encryption standards, and endpoint protection policies.

**Requirements:**

- Bachelor's in Engineering, Computer Science, or equivalent; certifications in CISA, CISSP, or ISO 27001 are a plus.

- 10–18 years of experience in technology Risk, risk management, or compliance, preferably in insurance or financial services.

- Strong understanding of GCP, CI/CD pipelines, DevSecOps, and infrastructure as code.

- Experience with tools such as Checkmarx, GitHub, Azure AD, HashiCorp Vault, CyberArk, and Imperva.

- Familiarity with SQL and NoSQL databases, encryption standards, and data classification frameworks.

- Proven ability to lead cross-functional Risk engagements and manage stakeholder expectations.

- Familiarity with enterprise risk frameworks (COSO, NIST).

- Experience in risk modelling and impact analysis.

- Exposure to cloud risk, data privacy, and third-party risk domains.

- Understanding of DevSecOps and secure SDLC practices.

- Experience with risk tooling and control libraries.

## Skills

### Required
- GCP
- CI/CD pipelines
- DevSecOps
- infrastructure as code
- Checkmarx
- GitHub
- Azure AD
- HashiCorp Vault
- CyberArk
- Imperva
- SQL
- NoSQL databases
- encryption standards
- data classification frameworks
- COSO
- NIST
- risk modelling
- impact analysis

### Nice to have
- CISA
- CISSP
- ISO 27001
- experience in setting up Risk functions in greenfield environments
- exposure to IRDAI Risks and regulatory inspections
- familiarity with centralised vulnerability dashboards and build breaker enforcement
- experience with public-facing application security, DDoS/WAAP onboarding, and penetration testing workflows

---

Source: [Apply at prudential.wd3.myworkdayjobs.com](https://prudential.wd3.myworkdayjobs.com/en-US/prudential/job/Mumbai/PHI---Lead--Tech-Risk_25090112?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)