Manager, Compliance Operations

Vertafore•Denver, CO

5d•Hybrid

About The Position

The Manager, Compliance Operations & Assurance manages the operational execution of Vertafore’s audit, certification, customer assurance, and vendor assessment activities. This hands-on operational management role coordinates internal and external stakeholders, maintains audit-ready evidence and assessment records, monitors deadlines and corrective actions, and improves processes to support efficient, consistent delivery. The role focuses on execution, documentation, workflow management, and accountability. The manager oversees audit and certification activities, customer security and compliance assessments, and vendor due diligence and reassessments. They maintain audit calendars, evidence repositories, response libraries, assessment records, procedures, and workflow systems; track findings and actions; and coordinate responses and evaluations with relevant teams. The role also reports on operational activity and leads assigned compliance operations personnel by setting standards, assigning work, coaching, and monitoring capacity. The position is based at an office location on a hybrid model and requires travel up to 10% of the time. Physical requirements include occasional lifting or moving up to 10 pounds, frequent repetitive hand and arm movements to operate a computer, close vision for computer work, and frequent sitting and/or standing.

Requirements

Bachelor’s degree in Business, Information Systems, Accounting, Compliance, or a related field, or equivalent experience.
5–8 years of experience in compliance operations, audit coordination, customer assurance, vendor assessments, or related functions.
Experience coordinating SOC 1, SOC 2, SOX, or comparable audits and handling customer questionnaires or due diligence requests.
Strong project management, documentation, communication, stakeholder coordination, and deadline-management skills.
Proficiency with Microsoft Office, SharePoint, and workflow or project management systems.
Legally authorized to work in the United States.
Ability to meet the stated physical requirements, including occasional lifting and/or moving up to 10 pounds, frequent repetitive hand and arm movements to operate a computer, close vision for computer work, and frequent sitting and/or standing.

Nice To Haves

Experience in SaaS, enterprise software, InsurTech, or another technology environment.
Familiarity with GovRAMP, ISO 27001, NIST, and vendor assurance materials, including SOC 2 reports.
Experience with OneTrust, questionnaire automation, customer trust centers, or evidence management platforms.
Experience supervising or mentoring analysts.
Relevant audit or assurance certification, such as CISA or ISO 27001 Lead Auditor.

Responsibilities

Manage and coordinate internal and external audit activities, including SOC 1, SOC 2, SOX, GovRAMP, corporate assessments, and other applicable assurance programs.
Maintain audit calendars, milestones, evidence requests, owners, and submission deadlines; act as an operational liaison with auditors and assessment teams.
Coordinate evidence collection, quality checks, organization, and submission; maintain centralized, audit-ready documentation and reusable evidence repositories.
Track findings, corrective action plans, remediation deadlines, accountable owners, overdue items, and documented closure.
Streamline recurring audit activities and reduce duplicative requests.
Manage customer security and compliance questionnaires, customer audit requests, due diligence inquiries, and supporting documentation.
Coordinate timely and consistent customer responses with Sales, Customer Success, Cybersecurity, Legal, and other subject-matter experts.
Maintain approved response libraries, certifications, attestations, audit reports, and reusable evidence packages.
Implement response standards, intake and prioritization workflows, and self-service or automation opportunities; monitor assessment volumes, turnaround times, service levels, and backlog.
Coordinate initial vendor due diligence, periodic reassessments, and vendor compliance documentation for onboarding and renewal.
Manage vendor assessment intake, questionnaires, documentation requests, and assignments in OneTrust or other approved platforms.
Maintain current vendor assessment records, SOC reports, certifications, supporting evidence, status, and reassessment schedules.
Route vendor responses and identified concerns to Cybersecurity, Legal, Procurement, and appropriate decision-makers for substantive evaluation.
Track outstanding vendor documentation, follow-up actions, overdue assessments, and completion against established procedures and deadlines.
Standardize vendor assessment templates and workflows, and report on assessment volume, cycle time, completion rates, and backlog.
Run recurring compliance operations and maintain documented procedures, checklists, workflows, and evidence management practices.
Administer compliance workflow tools, repositories, and tracking systems; ensure accurate records and clear ownership of deliverables.
Identify bottlenecks, automate repetitive activities, and improve consistency, efficiency, and operational scalability.
Coordinate priorities and deliverables across Cybersecurity, Technology Operations, Finance, Legal, Procurement, Sales, and business teams.
Prepare dashboards and management reports on audit milestones, customer and vendor assessment activity, evidence readiness, and open actions.
Oversee assigned compliance operations personnel, establish service standards, assign work, coach team members, and monitor capacity.
Escalate missed deadlines, unresolved dependencies, and resource constraints through established channels.