Technology Governance Associate

Hub International Insurance • Chicago, IL

4d

About The Position

The Technology Governance Associate supports the development, implementation, and ongoing operation of technology governance, risk, and compliance activities across HUB Technology & Operations. This hands-on, cross-functional role works with Technology Governance leadership and team members on control framework development, control implementation, process documentation, compliance operations, and governance technology enablement.

The role supports the governance and control lifecycle, including blueprint development, discovery, gap identification, remediation tracking, evidence management, continuous monitoring, and reporting. Its primary focus is HUB TechOps’ IT General Controls and related technology governance activities. Familiarity with cybersecurity, privacy, resilience, third-party technology risk, data governance, and emerging technology governance is helpful but not required; responsibilities may evolve with business needs and team priorities.

The successful candidate is organized, analytical, detail-oriented, and comfortable working with multiple stakeholders to translate governance requirements into practical deliverables. The role also supports the use and improvement of approved governance platforms, workflows, reporting, and automation.

Requirements

• Strong working knowledge of SOX 404, PCAOB AS 2201, ITGC control domains, NYDFS 23 NYCRR 500, SOC 2, COSO 2013, ISO 31000, COBIT, and the Three Lines Model.
• Ability to interpret established control requirements, assess operational practices, identify gaps, and support practical control implementation and remediation.
• Demonstrated ability to conduct process discovery, analyze current-state activities, and develop control blueprints, process narratives, workflows, risk assessments, and other governance deliverables.
• Strong analytical skills and attention to detail, including the ability to translate complex information into clear, actionable documentation and recommendations.
• Familiarity with GRC platforms, workflow technologies, reporting tools, and automation capabilities, and ability to support control implementation, evidence management, remediation tracking, and continuous monitoring.
• Ability to identify opportunities to streamline governance processes, improve data quality, and reduce manual activities through standardized workflows and technology.
• Strong communication and interpersonal skills, including the ability to independently engage control owners, technology teams, and governance stakeholders to gather requirements, resolve outstanding items, and complete assigned deliverables.
• Demonstrated ability to manage multiple assignments, collaborate across functional teams, take ownership of execution, and adapt to evolving priorities and responsibilities.

Nice To Haves

• Familiarity with cybersecurity, privacy, resilience, third-party technology risk, data governance, or emerging technology governance.

Responsibilities

• Assist with developing and maintaining technology control blueprints, implementation guides, discovery workbooks, evidence schedules, standard operating procedures, and other governance deliverables.
• Document and maintain control objectives, activities, execution requirements, evidence expectations, and ownership responsibilities.
• Map relationships between risks, regulatory requirements, policies, standards, procedures, applications, and technology controls.
• Support governance activities primarily related to IT General Controls and other applicable technology risk domains; identify documentation gaps and opportunities to standardize governance artifacts.
• Review, update, and publish governance documentation in accordance with established framework standards.
• Participate in discovery sessions with application owners, system administrators, process owners, and other technology representatives.
• Document current-state processes, control activities, roles and responsibilities, system dependencies, and supporting evidence.
• Identify gaps between existing processes and established control requirements, and translate findings into implementation actions, remediation items, and follow-up activities.
• Support the development of process narratives, workflows, RACI matrices, risk assessments, and operating procedures.
• Coordinate with control owners to obtain documentation, clarify outstanding questions, and support implementation readiness.
• Assist with assessing how changes in technology, processes, or regulatory expectations may affect governance, risk, control, and compliance requirements.
• Support control monitoring, evidence readiness, remediation tracking, and compliance reporting.
• Maintain evidence schedules, control inventories, ownership records, and recurring compliance calendars; collect, organize, and review control documentation and evidence for completeness.
• Support development and maintenance of control performance metrics, KPIs, exception reporting, and monitoring dashboards.
• Document control deficiencies, track corrective actions, and prepare status updates; support future control self-assessment activities as the operating model matures.
• Identify changes in regulatory expectations, industry practices, and technology risks that may require updates to governance documentation or controls.
• Support use of approved governance, risk, and compliance platforms to manage control records, workflows, gaps, remediation, evidence, and reporting.
• Assist with workflow documentation, configuration support, user acceptance testing, and process improvements under the direction of functional leads and authorized platform administrators.
• Maintain accurate control and compliance information in approved systems and coordinate data consistency across governance platforms, SharePoint, AuditBoard (Optro), and other relevant systems.
• Identify opportunities to reduce manual activities through automation, standardized workflows, and improved reporting.
• Assist with developing reports, dashboards, and workflow enhancements that improve visibility into control performance, remediation, and compliance obligations.

Benefits

• Health, dental, vision, life, and disability insurance
• Flexible spending account (FSA)
• 401(k) accounts
• Retirement savings matching
• Paid time off, including vacation, sick, personal, floating holidays, and company holidays
• Paid parental leave
• Wellbeing program
• Eligible annual bonuses, equity, and commissions may be available for some positions
• Structured training, licensing support, and ongoing development opportunities

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed