Manager, Compliance Operations

Vertafore•Denver, CO

19d•$120,000 - $140,000•Hybrid

About The Position

The Manager, Compliance Operations & Assurance manages the operational execution of Vertafore’s audit, certification, customer assurance, and vendor assessment activities. This hands-on operational management position focuses on execution, documentation, workflow management, and accountability. The role coordinates internal and external stakeholders, maintains audit-ready evidence and assessment records, monitors deadlines and corrective actions, and improves processes to support efficient, consistent delivery. The manager oversees recurring compliance operations and related procedures, workflows, evidence management practices, workflow tools, repositories, and tracking systems. The role coordinates priorities across business and specialist teams, prepares management reporting, and oversees assigned compliance operations personnel.

Requirements

Bachelor’s degree in Business, Information Systems, Accounting, Compliance, or a related field, or equivalent experience.
5–8 years of experience in compliance operations, audit coordination, customer assurance, vendor assessments, or related functions.
Experience coordinating SOC 1, SOC 2, SOX, or comparable audits and handling customer questionnaires or due diligence requests.
Strong project management, documentation, communication, stakeholder coordination, and deadline-management skills.
Proficiency with Microsoft Office, SharePoint, and workflow or project management systems.

Nice To Haves

Experience in SaaS, enterprise software, InsurTech, or another technology environment.
Familiarity with GovRAMP, ISO 27001, NIST, and vendor assurance materials, including SOC 2 reports.
Experience with OneTrust, questionnaire automation, customer trust centers, or evidence management platforms.
Experience supervising or mentoring analysts.
Relevant audit or assurance certification, such as CISA or ISO 27001 Lead Auditor.

Responsibilities

Manage and coordinate internal and external audits and assurance programs, including SOC 1, SOC 2, SOX, GovRAMP, and corporate assessments.
Maintain audit calendars, milestones, evidence requests, owners, and submission deadlines; act as an operational liaison with auditors and assessment teams.
Coordinate evidence collection, quality checks, organization, and submission, and maintain centralized audit-ready documentation and reusable evidence repositories.
Track findings, corrective action plans, and remediation deadlines; follow up with accountable owners, escalate overdue items, and document closure.
Streamline recurring audit activities and reduce duplicative requests.
Manage customer security and compliance questionnaires, customer audit requests, due diligence inquiries, and supporting documentation.
Coordinate timely, consistent customer responses with Sales, Customer Success, Cybersecurity, Legal, and other subject-matter experts.
Maintain approved response libraries, certifications, attestations, audit reports, and reusable evidence packages.
Implement response standards, intake and prioritization workflows, and self-service or automation opportunities; monitor volumes, turnaround times, service levels, and backlog.
Coordinate initial vendor due diligence, periodic reassessments, and vendor compliance documentation for onboarding and renewal.
Manage vendor assessment intake, questionnaires, documentation requests, and assignments in OneTrust or other approved platforms.
Maintain current vendor assessment records, SOC reports, certifications, supporting evidence, status, and reassessment schedules.
Route vendor responses and identified concerns to Cybersecurity, Legal, Procurement, and appropriate decision-makers for substantive evaluation.
Track outstanding documentation, follow-up actions, overdue assessments, and completion against established procedures and deadlines.
Standardize vendor assessment templates and workflows, and report on assessment volume, cycle time, completion rates, and backlog.
Run recurring compliance operations and maintain documented procedures, checklists, workflows, and evidence management practices.
Administer compliance workflow tools, repositories, and tracking systems, ensuring accurate records and clear ownership of deliverables.
Identify bottlenecks, automate repetitive activities, and improve consistency, efficiency, and operational scalability.
Coordinate priorities and deliverables across Cybersecurity, Technology Operations, Finance, Legal, Procurement, Sales, and business teams.
Prepare dashboards and management reports on audit milestones, customer and vendor assessment activity, evidence readiness, and open actions.
Oversee assigned compliance operations personnel, establish service standards, assign work, coach team members, and monitor capacity.
Escalate missed deadlines, unresolved dependencies, and resource constraints through established channels.