Operational Compliance Manager
About The Position
The Operational Compliance Manager develops and oversees compliance operations, technology policy governance, and risk-tracking capabilities within HUB’s Technology Governance function. The role ensures technology controls remain evidenced, assessed, monitored, remediated, and audit-ready after implementation, while overseeing technology policy lifecycle management and providing visibility into technology risks. Working with the Technology Controls Framework Manager and Control Implementation Manager, the position establishes sustainable processes for control self-assessments, evidence management, audit readiness, remediation, regulatory change coordination, continuous monitoring, and compliance reporting. It also helps operationalize Optro or an equivalent GRC platform as the workflow and monitoring foundation for Technology Governance, reducing manual evidence collection and fragmented compliance processes. The role partners across Technology & Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external auditors to provide control owners with a coordinated governance experience. It also oversees the Technology Policy Lead and supports policy governance, technology risk tracking, and evaluation of emerging technology risks.
Requirements
- At least 7 years of progressive experience in IT governance, GRC, ITGC compliance, technology risk, or technology audit in a regulated environment.
- Strong working knowledge of ITGCs, SOX, technology risk management, policy governance, and relevant regulatory and industry frameworks, including COBIT, COSO, NIST, ISO, NYDFS, and SOC reporting.
- Strong understanding of control design, evidence requirements, control self-assessments, audit readiness, deficiency management, remediation, continuous monitoring, technology policy lifecycle management, and risk tracking.
- Demonstrated experience with Optro or an equivalent GRC platform, including control, assessment, evidence, issue, remediation, workflow, and reporting capabilities.
- Experience working within governance technology ecosystems incorporating SharePoint, Workiva, Seismic, ServiceNow, Power BI, or equivalent technologies.
- Understanding of source-of-truth architecture, workflow design, regulatory and control mapping, and cross-platform data integrity.
- Experience working directly with technology control owners, Information Security/GRC, Internal Controls/SOX, Risk Management, Internal Audit, Legal and Compliance, and external auditors.
- Experience leading governance professionals and overseeing technology policy and risk management activities, with awareness of emerging risks such as artificial intelligence, cybersecurity, data privacy, and third-party technology dependencies.
- Demonstrated ability to use automation, analytics, and emerging technologies to improve compliance operations and reduce manual governance activities.
- Strong written and verbal communication skills, including the ability to translate governance requirements into practical expectations for technology teams and provide clear leadership reporting.
Nice To Haves
- Financial services or insurance experience is strongly preferred.
Responsibilities
- Establish and manage recurring control self-assessments, evidence collection and review, compliance calendars, audit readiness, issue management, remediation tracking, and escalation processes.
- Ensure control evidence is current, complete, retrievable, and aligned with defined control attributes and evidence requirements.
- Coordinate control testing and audit-readiness activities with control owners, Internal Controls/SOX, Internal Audit, GRC, and external auditors.
- Track control deficiencies through remediation and closure, coordinating with accountable control owners and risk stakeholders.
- Develop and administer Technology Governance workflows in Optro or an equivalent GRC platform for controls, assessments, evidence, issues, remediation, monitoring, and reporting.
- Maintain traceability across technology risks, regulatory requirements, policies, standards, procedures, controls, and reporting in partnership with relevant technology governance leads.
- Coordinate regulatory and framework change intake, impact assessment, mapping, and implementation tracking with subject-matter owners.
- Identify opportunities for workflow automation, system integration, analytics, and responsible AI use to improve control mapping, evidence management, assessments, and monitoring.
- Transition newly operationalized controls into recurring assessment, evidence, monitoring, and reporting processes in partnership with the Control Implementation Manager.
- Develop continuous and risk-based monitoring capabilities that provide timely visibility into control performance and emerging compliance gaps.
- Identify recurring evidence, process, or control weaknesses and coordinate sustainable remediation with control owners and governance stakeholders.
- Develop training and guidance to help control owners and participants perform governance responsibilities consistently.
- Establish compliance metrics covering control health, assessment completion, evidence readiness, deficiencies, remediation, and audit readiness.
- Partner with Data and Reporting resources to develop dashboards and management reporting using GRC, ServiceNow, Power BI, or equivalent technologies.
- Provide the Senior Director with accurate reporting and insights for executive communications about the TechOps control environment.
- Coordinate across Technology Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external auditors to reduce duplication and maintain a unified governance approach.
- Provide leadership and oversight of the Technology Policy Lead responsible for technology policy governance and risk tracking.
- Ensure technology policies and standards are developed, reviewed, approved, communicated, adopted, and monitored for compliance.
- Oversee technology risk identification, documentation, ownership, assessment, escalation, and tracking, maintaining visibility and accountability as enterprise risk management capabilities mature.
- Support identification and evaluation of emerging technology risks, including artificial intelligence, cybersecurity, data governance, third-party technology risk, and evolving regulatory or operational exposures.
Benefits
- Comprehensive health, dental, vision, life, and disability insurance
- Flexible spending account (FSA)
- 401(k) accounts and retirement savings matching
- Paid time off, including vacation, sick, personal, floating holidays, and company holidays
- Paid parental leave
- Wellbeing program
- Company-paid life and disability plans
- Structured training, licensing support, and ongoing development opportunities
- Eligible annual bonuses, equity, and commissions may be available for some positions
- Community impact opportunities through HUB Gives
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
Education Level
No Education Listed
