Lead - Tech Audit

We are looking for a talented candidate for the role of Tech Audit Lead at Prudential Health India (PHI). As a Tech Audit Lead, you will develop and implement a comprehensive technology audit strategy and annual audit plan aligned with PHI's business and regulatory requirements.

Responsibilities:

• Conduct risk-based audits across infrastructure, applications, data platforms, and security controls.
• Ensure complete and tamper-proof audit trails of user activities, data changes, and system events.
• Collaborate with InfoSec, DevSecOps, and AppSec teams to validate remediation of vulnerabilities and ensure patch compliance.
• Lead privacy impact assessments, penetration testing reviews, and security onboarding for new applications.
• Monitor and report on the implementation of audit recommendations and track remediation progress.
• Maintain documentation and audit logs in accordance with professional standards and Prudential Group policies.
• Support investigations into technology-related incidents, control breaches, or compliance failures.
• Present audit findings and risk assessments to senior leadership and the Audit Committee.
• Stay updated on emerging risks, regulatory changes, and best practices in technology audit and governance.

Security & Compliance Technologies:

• Implement and audit SAST, DAST, and SCA scanning tools and processes.
• Ensure secure integration of CI/CD pipelines using Checkmarx, GitHub, GitHub Actions, HashiCorp Vault, and Azure AD.
• Oversee onboarding and compliance of WAF solutions including Imperva API Security and DDoS/WAAP protection.
• Validate controls for privileged access management using tools like CyberArk.
• Ensure compliance with data classification, encryption standards, and endpoint protection policies.

Requirements:

• Bachelor's in Engineering, Computer Science, or equivalent; certifications in CISA, CISSP, or ISO 27001 are a plus.
• 10–18 years of experience in technology audit, risk management, or compliance, preferably in insurance or financial services.
• Strong understanding of GCP, CI/CD pipelines, DevSecOps, and infrastructure as code.
• Experience with tools such as Checkmarx, GitHub, Azure AD, HashiCorp Vault, CyberArk, and Imperva.
• Familiarity with SQL and NoSQL databases, encryption standards, and data classification frameworks.
• Proven ability to lead cross-functional audit engagements and manage stakeholder expectations.