Operational Compliance Manager

Hub International Insurance•Chicago, IL

About The Position

The Operational Compliance Manager develops and oversees compliance operations, technology policy governance, and risk tracking within HUB’s Technology Governance function. The role keeps technology controls evidenced, assessed, monitored, remediated, and audit-ready after implementation, and oversees technology policy lifecycle management and visibility into technology risks. It establishes sustainable processes for control self-assessments, evidence management, audit readiness, remediation, regulatory change coordination, continuous monitoring, and compliance reporting. The manager also helps operationalize Optro or an equivalent GRC platform as the workflow and monitoring backbone for Technology Governance, reducing manual evidence collection and fragmented compliance processes. The role partners across Technology & Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external audit teams. It provides control owners with a coordinated, sustainable governance experience and oversees the Technology Policy Lead responsible for the technology policy governance and risk tracking capability. The position provides the Senior Director with reporting and insights on the state of the TechOps control environment. HUB International is a global insurance and employee benefits broker with more than $5 billion in revenue, almost 20,000 employees, and 600 offices throughout North America. The expected salary range is $140,000 to $160,000, with actual compensation affected by skills, experience, working location, business line, scope, and level.

Requirements

At least 7 years of progressive experience in IT governance, GRC, ITGC compliance, technology risk, or technology audit in a regulated environment.
Strong working knowledge of ITGCs, SOX, technology risk management, policy governance, and relevant regulatory and industry frameworks, including COBIT, COSO, NIST, ISO, NYDFS, and SOC reporting.
Strong understanding of control design, evidence requirements, control self-assessments, audit readiness, deficiency management, remediation, continuous monitoring, technology policy lifecycle management, and risk tracking.
Demonstrated experience with Optro or an equivalent GRC platform, including control, assessment, evidence, issue, remediation, workflow, and reporting capabilities.
Experience working within governance technology ecosystems incorporating SharePoint, Workiva, Seismic, ServiceNow, Power BI, or equivalent technologies.
Understanding of source-of-truth architecture, workflow design, regulatory and control mapping, and cross-platform data integrity.
Experience working directly with technology control owners, Information Security/GRC, Internal Controls/SOX, Risk Management, Internal Audit, Legal and Compliance, and external auditors.
Experience leading governance professionals and overseeing technology policy and risk management activities, with awareness of emerging risks such as artificial intelligence, cybersecurity, data privacy, and third-party technology dependencies.
Demonstrated ability to use automation, analytics, and emerging technologies to improve compliance operations and reduce manual governance activities.
Strong written and verbal communication skills, including the ability to translate governance requirements into practical expectations for technology teams and provide clear reporting to leadership.

Nice To Haves

Financial services or insurance experience is strongly preferred.

Responsibilities

Establish and manage recurring control self-assessments, evidence collection and review, compliance calendars, audit readiness, issue management, remediation tracking, and escalation processes.
Ensure control evidence is current, complete, retrievable, and aligned with defined control attributes and evidence requirements.
Coordinate control testing and audit-readiness activities with control owners, Internal Controls/SOX, Internal Audit, GRC, and external auditors.
Track control deficiencies through remediation and closure in coordination with accountable control owners and risk stakeholders.
Develop and administer Technology Governance workflows in Optro or an equivalent GRC platform for controls, assessments, evidence, issues, remediation, monitoring, and reporting.
Maintain traceability across technology risks, regulatory requirements, policies, standards, procedures, controls, and reporting in partnership with the Technology Framework Manager and Technology Policy Lead.
Coordinate regulatory and framework change intake, impact assessment, mapping, and implementation tracking with subject-matter owners.
Identify opportunities for workflow automation, system integration, analytics, and responsible use of AI to improve control mapping, evidence management, assessments, and monitoring.
Transition newly operationalized controls into recurring assessment, evidence, monitoring, and reporting processes with the Control Implementation Manager.
Develop continuous and risk-based monitoring capabilities to provide timely visibility into control performance and emerging compliance gaps.
Identify recurring evidence, process, or control weaknesses and coordinate sustainable remediation with control owners and governance stakeholders.
Develop training and guidance to help control owners and participants perform governance responsibilities consistently.
Establish compliance metrics for control health, assessment completion, evidence readiness, deficiencies, remediation, and audit readiness.
Partner with Data and Reporting resources to develop sustainable dashboards and management reporting using GRC, ServiceNow, Power BI, or equivalent technologies.
Provide the Senior Director with accurate reporting and insights for executive communications about the TechOps control environment.
Coordinate across Technology Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external auditors to reduce duplication and maintain a unified governance approach.
Provide leadership and oversight of the Technology Policy Lead responsible for technology policy governance and risk tracking.
Ensure technology policies and standards are developed, reviewed, approved, communicated, adopted, and monitored for compliance.
Oversee technology risk identification, documentation, ownership, assessment, escalation, and tracking, maintaining visibility and accountability as enterprise risk management capabilities mature.
Support identification and evaluation of emerging technology risks, including artificial intelligence, cybersecurity, data governance, third-party technology risk, and evolving regulatory or operational exposures.

Benefits

Health, dental, vision, life, and disability insurance
Flexible spending account (FSA)
Health savings account (HSA)
401(k) accounts and retirement savings matching
Paid time off, including vacation, sick, personal, floating holidays, and company holidays
Paid parental leave
Wellbeing program
Training, licensing support, and ongoing development opportunities
Potential annual bonuses, equity, and commissions for eligible positions
Company-paid life and disability plans