# Lead - Tech Audit

**Company**: Prudential Health India (PHI)
**Location**: Mumbai
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Category**: IT
**Industry**: Finance

**Apply**: https://prudential.wd3.myworkdayjobs.com/en-US/prudential/job/Mumbai/PHI---Lead--Tech-Audit_25090110?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_4955448a-96a

## Description

We are looking for a talented candidate for the role of Tech Audit Lead at Prudential Health India (PHI). As a Tech Audit Lead, you will develop and implement a comprehensive technology audit strategy and annual audit plan aligned with PHI's business and regulatory requirements.

Responsibilities:

- Conduct risk-based audits across infrastructure, applications, data platforms, and security controls.

- Ensure complete and tamper-proof audit trails of user activities, data changes, and system events.

- Collaborate with InfoSec, DevSecOps, and AppSec teams to validate remediation of vulnerabilities and ensure patch compliance.

- Lead privacy impact assessments, penetration testing reviews, and security onboarding for new applications.

- Monitor and report on the implementation of audit recommendations and track remediation progress.

- Maintain documentation and audit logs in accordance with professional standards and Prudential Group policies.

- Support investigations into technology-related incidents, control breaches, or compliance failures.

- Present audit findings and risk assessments to senior leadership and the Audit Committee.

- Stay updated on emerging risks, regulatory changes, and best practices in technology audit and governance.

Security & Compliance Technologies:

- Implement and audit SAST, DAST, and SCA scanning tools and processes.

- Ensure secure integration of CI/CD pipelines using Checkmarx, GitHub, GitHub Actions, HashiCorp Vault, and Azure AD.

- Oversee onboarding and compliance of WAF solutions including Imperva API Security and DDoS/WAAP protection.

- Validate controls for privileged access management using tools like CyberArk.

- Ensure compliance with data classification, encryption standards, and endpoint protection policies.

Requirements:

- Bachelor's in Engineering, Computer Science, or equivalent; certifications in CISA, CISSP, or ISO 27001 are a plus.

- 10–18 years of experience in technology audit, risk management, or compliance, preferably in insurance or financial services.

- Strong understanding of GCP, CI/CD pipelines, DevSecOps, and infrastructure as code.

- Experience with tools such as Checkmarx, GitHub, Azure AD, HashiCorp Vault, CyberArk, and Imperva.

- Familiarity with SQL and NoSQL databases, encryption standards, and data classification frameworks.

- Proven ability to lead cross-functional audit engagements and manage stakeholder expectations.

## Skills

### Required
- GCP
- CI/CD pipelines
- DevSecOps
- Checkmarx
- GitHub
- Azure AD
- HashiCorp Vault
- CyberArk
- Imperva
- SQL
- NoSQL databases

### Nice to have
- CISA
- CISSP
- ISO 27001
- centralised vulnerability dashboards
- build breaker enforcement
- public-facing application security
- DDoS/WAAP onboarding
- penetration testing workflows

---

Source: [Apply at prudential.wd3.myworkdayjobs.com](https://prudential.wd3.myworkdayjobs.com/en-US/prudential/job/Mumbai/PHI---Lead--Tech-Audit_25090110?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)