PHI - Lead- Tech Risk
Core
Establishing and leading the technology Risk function to ensure compliance with internal policies, regulatory frameworks (IRDAI, GDPR, HIPAA), and global standards for a greenfield health insurance deployment in India.
Role type
Lead Technology Risk Manager (People Manager)
Builds
Risk trails, vulnerability management, and risk mitigation across cloud-native infrastructure and applications.
Domain
Insurance / Financial Services / Technology Risk
Deliverable
dashboards & analysis
Required skills
Technology Risk strategy, regulatory compliance (IRDAI, GDPR, HIPAA), vulnerability management, risk mitigation, privacy impact assessments, penetration testing reviews, risk register management, scenario modelling, cloud risk, data privacy, third-party risk, DevSecOps, secure SDLC, risk tooling, control libraries
Preferred skills
CISA, CISSP, ISO 27001 certifications, experience in greenfield Risk function setup, IRDAI regulatory inspections, centralized vulnerability dashboards, build breaker enforcement, public-facing application security, DDoS/WAAP onboarding
Technologies
Checkmarx, GitHub, GitHub Actions, HashiCorp Vault, Azure AD, CyberArk, Imperva API Security, WAF, SAST, DAST, SCA, SQL, NoSQL
Responsibilities
Develop and implement a comprehensive technology Risk strategy and annual Risk plan, Conduct risk-based assessments across infrastructure and applications, Ensure complete and tamper-proof Risk trails of user activities and system events, Collaborate with InfoSec and DevSecOps teams to validate vulnerability remediation, Lead privacy impact assessments and security onboarding for new applications, Monitor and report on Risk recommendations and remediation progress, Present Risk findings and assessments to senior leadership and the Risk Committee, Support investigations into technology-related incidents and control breaches
Seniority
Lead, People Manager
