PHI - Lead- Tech Audit

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured—for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed. At  Prudential Health India (PHI) , we are on a mission to make Indians healthier, while bridging the health protection gap. This is a Zero-to-One team undertaking a greenfield health insurance deployment in India committed to building journeys that truly empathise with the customer and offer a differentiated, bespoke experience. To partner us in this mission, we are looking for a talented candidate for the role of… Tech Audit Lead Note:  The title will depend on (1) Experience (2) Expertise and (3) Performance. So the title could be: Tech Audit Lead Senior Tech Audit Lead (Associate Director) Technology Audit People Manager Role Experience:  10–18 years Location:  Mumbai Work Mode:  Work from office only Job Profile Summary The Tech Audit Lead will be responsible for establishing and leading the technology audit function at PHI, ensuring compliance with internal policies, regulatory frameworks (IRDAI, GDPR, HIPAA), and global Prudential standards. This role will oversee audit trails, vulnerability management, and risk mitigation across PHI’s cloud-native infrastructure and applications.

Develop and implement a comprehensive technology audit strategy and annual audit plan aligned with PHI’s business and regulatory requirements. Conduct risk-based audits across infrastructure, applications, data platforms, and security controls. Ensure complete and tamper-proof  audit trails  of user activities, data changes, and system events. Collaborate with InfoSec, DevSecOps, and AppSec teams to validate remediation of vulnerabilities and ensure patch compliance. Lead  privacy impact assessments ,  penetration testing reviews , and  security onboarding  for new applications. Monitor and report on the implementation of audit recommendations and track remediation progress. Maintain documentation and audit logs in accordance with professional standards and Prudential Group policies. Support investigations into technology-related incidents, control breaches, or compliance failures. Present audit findings and risk assessments to senior leadership and the Audit Committee. Stay updated on emerging risks, regulatory changes, and best practices in technology audit and governance. Security & Compliance Technologies Implement and audit  SAST ,  DAST , and  SCA  scanning tools and processes. Ensure secure integration of CI/CD pipelines using  Checkmarx ,  GitHub ,  GitHub Actions ,  HashiCorp Vault , and  Azure AD . Oversee onboarding and compliance of  WAF (Web Application Firewall)  solutions including  Imperva API Security  and  DDoS/WAAP protection . Validate controls for  privileged access management  using tools like  CyberArk . Ensure compliance with  data classification ,  encryption standards , and  endpoint protection  policies.

Looking For Technical Skills & Work Experience Bachelor's in Engineering, Computer Science, or equivalent; certifications in CISA, CISSP, or ISO 27001 are a plus. 10–18 years of experience in technology audit,