$120,000 - $140,000 / year
#LI-Hybrid
Core Duties and Responsibilities:
The Manager, Compliance Operations & Assurance manages the operational execution of Vertafore's audit, certification, customer assurance, and vendor assessment activities. The role coordinates internal and external stakeholders, maintains audit-ready evidence and assessment records, monitors deadlines and corrective actions, and improves processes to support efficient, consistent delivery.
This is a hands-on operational management position, focused on execution, documentation, workflow management, and accountability.
Audit & Certification Management
- Manage and coordinate internal and external audit activities, including SOC 1, SOC 2, SOX, GovRAMP, corporate assessments, and other applicable assurance programs.
- Maintain audit calendars, milestones, evidence requests, owners, and submission deadlines; serve as an operational liaison with auditors and assessment teams.
- Coordinate evidence collection, quality checks, organization, and submission; maintain centralized, audit-ready documentation and reusable evidence repositories.
- Track findings, corrective action plans, and remediation deadlines with accountable owners; escalate overdue items and document closure.
- Streamline recurring audit activities and reduce duplicative requests.
Customer Assurance & Compliance Assessments
- Manage customer security and compliance questionnaires, customer audit requests, due diligence inquiries, and supporting documentation.
- Coordinate timely, consistent responses with Sales, Customer Success, Cybersecurity, Legal, and other subject-matter experts.
- Maintain approved response libraries, certifications, attestations, audit reports, and reusable evidence packages.
- Implement response standards, intake and prioritization workflows, and self-service or automation opportunities.
- Monitor assessment volumes, turnaround times, service levels, and backlog.
Vendor Assessments & Third-Party Compliance Operations
- Coordinate initial vendor due diligence, periodic reassessments, and vendor compliance documentation for onboarding and renewal.
- Manage vendor assessment intake, questionnaires, documentation requests, and assignments in OneTrust or other approved platforms.
- Maintain current assessment records, SOC reports, certifications, supporting evidence, status, and reassessment schedules.
- Route vendor responses and identified concerns to Cybersecurity, Legal, Procurement, and appropriate decision-makers for substantive evaluation.
- Track outstanding documentation, follow-up actions, overdue assessments, and completion against established procedures and deadlines.
- Standardize templates, improve workflows, and report on assessment volume, cycle time, completion rates, and backlog.
Compliance Operations & Process Improvement
- Run recurring compliance operations and maintain documented procedures, checklists, workflows, and evidence management practices.
- Administer compliance workflow tools, repositories, and tracking systems; ensure accurate records and clear ownership of deliverables.
- Identify bottlenecks, automate repetitive activities, and improve consistency, efficiency, and operational scalability.
Cross-Functional Coordination, Reporting & Team Management
- Coordinate priorities and deliverables across Cybersecurity, Technology Operations, Finance, Legal, Procurement, Sales, and business teams.
- Prepare dashboards and management reports on audit milestones, customer and vendor assessment activity, evidence readiness, and open actions.
- Oversee assigned compliance operations personnel, establish service standards, assign work, coach team members, and monitor capacity.
- Escalate missed deadlines, unresolved dependencies, and resource constraints through established channels.
Knowledge, Skills and Abilities:
- Strong project management, documentation, communication, stakeholder coordination, and deadline-management skills.
- Proficiency with Microsoft Office, SharePoint, and workflow or project management systems.
Skills & Requirements
Qualifications:
Required
- Bachelor's degree in Business, Information Systems, Accounting, Compliance, or related field, or equivalent experience.
- 5-8 years of experience in compliance operations, audit coordination, customer assurance, vendor assessments, or related functions.
- Experience coordinating SOC 1, SOC 2, SOX, or comparable audits and handling customer questionnaires or due diligence requests.
Preferred
- Experience in SaaS, enterprise software, InsurTech, or another technology environment.
- Familiarity with GovRAMP, ISO 27001, NIST, and vendor assurance materials, including SOC 2 reports.
- Experience with OneTrust, questionnaire automation, customer trust centers, or evidence management platforms.
- Experience supervising or mentoring analysts; relevant audit or assurance certification (e.g., CISA or ISO 27001 Lead Auditor).
Additional Requirements and Details:
• Travel required up to 10% of the time.
• Located and working from an office location on a hybrid model.
• Occasional lifting and/or moving up to 10 pounds.
• Frequent repetitive hand and arm movements required to operate a computer.
• Specific vision abilities required by this job include close vision (working on a computer, etc.).
• Frequent sitting and/or standing.
Is this role not an exact fit for you? Keep an eye on our Careers Page for other positions!
Why Vertafore is the place for you: *Canada Only
- The opportunity to work in a space where modern technology meets a stable and vital industry
- Medical, vision & dental plans
- Life, AD&D
- Short Term and Long Term Disability
- Pension Plan & Employer Match
- Maternity, Paternity and Parental Leave
- Employee and Family Assistance Program (EFAP)
- Education Assistance
- Additional programs - Employee Referral and Internal Recognition
Why Vertafore is the place for you: *US Only
- The opportunity to work in a space where modern technology meets a stable and vital industry
- We have a Flexible First work environment! Our North America team members use our offices for collaboration, community and team-building, with members asked to sometimes come into an office and/or travel depending on job responsibilities. Other times, our teams work from home or a similar environment.
- Medical, vision & dental plans
- PPO & high-deductible options
- Health Savings Account & Flexible Spending Accounts Options:
- Health Care FSA
- Dental & Vision FSA
- Dependent Care FSA
- Commuter FSA
- Life, AD&D (Basic & Supplemental), and Disability
- 401(k) Retirement Savings Plain & Employer Match
- Supplemental Plans - Pet insurance, Hospital Indemnity, and Accident Insurance
- Parental Leave & Adoption Assistance
- Employee Assistance Program (EAP)
- Education & Legal Assistance
- Additional programs - Tuition Reimbursement, Employee Referral, Internal Recognition, and Wellness
- Commuter Benefits (Denver)
