Technology Governance Policy Lead

Hub International Insurance•Chicago, IL

1d•$120,000 - $140,000

About The Position

The Technology Governance Policy Lead develops and operates the policy and risk-tracking capability within HUB’s Technology Governance function. The role ensures technology policies are well written, approved, adopted, and enforced, and that technology risks remain visible and owned. It acts as an extension of Technology Governance leadership in stakeholder engagement, carrying governance priorities into working sessions and executive discussions and exercising judgment about what can be negotiated and what must be escalated. This is an ERM-adjacent role, not an enterprise risk management ownership role: it maintains a focused risk log but does not own risk appetite, quantitative risk modeling, or enterprise risk methodology. The Policy Lead partners across Technology, Security, Operations, Legal, HR, and Finance to provide policy owners and control owners with a coordinated experience. The role oversees policy authorship across teams, sets expectations for format and quality, and authors or co-authors policies when needed. It translates regulatory requirements, including SOX, SOC 2, and ITGC, into clear, enforceable, audit-ready policy language; gathers stakeholder input; tracks reviews and approvals; maintains policy versions and approval trails; and connects policy requirements to operational processes, controls, and owners. It also supports implementation plans and enforcement mechanisms, including rollout steps, compliance checks, accountability, and exception handling. The Policy Lead maintains a structured risk log across Technology and Operations, works with stakeholders to translate regulatory and audit findings into owned risk items, follows up on status, and escalates stale or unowned items. It conducts research for partner teams and turns regulatory, legal, framework, and industry information into concise briefs. The role also prepares executive decks and pre-reads, presents policy and risk topics when called upon, maintains a decision log, and follows decisions through to completion.

Requirements

Senior-level, progressive experience in IT governance, policy development, GRC, technology risk, or compliance in a regulated environment.
Exceptional professional writing skills, including polished, precise, audience-aware policy text, executive briefs, and decision records.
Strong presentation skills and the ability to present policy, risk, and research clearly and confidently to executive committees and cross-functional leaders and respond to challenges.
Strong working knowledge of SOX, SOC 2, and ITGC control domains, with the ability to translate requirements into policy language that satisfies an auditor.
Demonstrated discipline in owning and maintaining a risk or issue log and following up with stakeholders through closure.
Strong research and synthesis skills, including the ability to turn regulatory, legal, or industry material into clear briefs for Legal, HR, Finance, and Technology audiences.
Executive presence and political fluency to engage stakeholders at all levels.
Sound judgment about when to act within delegated authority and when to escalate.

Nice To Haves

Audit readiness or compliance-by-default experience, including ITSM tooling and continuous improvement pipelines.
Experience operating in a pre-formal-function environment and building scaffolding that a later, more formal team will inherit.

Responsibilities

Guide and oversee policy owners across teams, setting expectations for policy format, quality, and consistency with HUB’s standard policy format.
Author policies directly when needed and co-author policies with subject matter owners across Technology, Security, Operations, Legal, HR, and Finance.
Translate regulatory requirements, including SOX, SOC 2, and ITGC, into clear, enforceable, audit-ready policy language.
Socialize policy drafts with stakeholders before formal review to gather input, build understanding and buy-in, and surface objections early.
Track policies through review and approval, follow up with reviewers and approvers, and escalate stalled items.
Conduct periodic and event-driven policy reviews, propose revisions, and maintain version control and approval trails.
Map policy requirements to the processes, controls, and owners responsible for carrying them out.
Help develop policy implementation and enforcement plans, including rollout steps, owners, timelines, compliance checks, accountability, and exception handling.
Maintain a running risk log across Technology and Operations activities.
Work with stakeholders to translate regulatory and audit findings into tracked risk items with clear ownership.
Follow up with risk owners for status updates and flag or escalate stale, escalating, or orphaned risk items.
Keep the risk log structured so it can be handed off intact when a formal ERM function is established.
Research regulatory and framework requirements, peer and industry practices, and policy precedents for Legal, HR, Finance, and Technology teams.
Turn research into concise, polished briefs and connect teams when policy or risk questions cross functional boundaries.
Prepare clear, professional decks and pre-reads for executive committee sessions involving policy or risk decisions.
Present policy, risk, and research items to the executive committee when called upon, framing decisions and supporting clear outcomes.
Maintain a decision log recording decisions, decision-makers, and required actions, and follow through until actions are complete.

Benefits

Health, dental, vision, life, and disability insurance.
Flexible spending accounts (FSA).
Health savings accounts (listed as “HAS” in the posting).
401(k) accounts and retirement savings matching.
Paid time off, including vacation, sick, personal, floating holidays, and company holidays.
Eligible annual bonuses, equity, and commissions may be available for some positions.
Structured training, licensing support, and ongoing development opportunities.
Paid parental leave.
Wellbeing program.
Company-paid life and disability plans.
Community impact opportunities through HUB Gives.