Position SummaryThe Operational Compliance Manager develops and oversees the compliance operations, technology policy governance, and risk tracking capabilities within HUB's Technology Governance function. The role ensures technology controls remain evidenced, assessed, monitored, remediated, and audit-ready after implementation, while providing oversight of technology policy lifecycle management and visibility into technology risks.
Working closely with the Technology Controls Framework Manager and Control Implementation Manager, this role establishes sustainable governance processes for control self-assessments, evidence management, audit readiness, remediation, regulatory change coordination, continuous monitoring, and compliance reporting. The Manager also helps operationalize Optro or an equivalent GRC platform as the workflow and monitoring backbone for Technology Governance, reducing reliance on manual evidence collection and fragmented compliance processes.
The Senior Manager partners across Technology & Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external auditors to provide control owners with a coordinated and sustainable governance experience.
The WorkOperate the compliance lifecycle• Establish and manage recurring control self-assessments, evidence collection and review, compliance calendars, audit readiness, issue management, remediation tracking, and escalation processes.
• Ensure control evidence is current, complete, retrievable, and aligned to defined control attributes and evidence requirements.
• Coordinate control testing and audit-readiness activities with control owners, Internal Controls/SOX, Internal Audit, GRC, and external auditors.
• Track identified control deficiencies through remediation and closure, coordinating with accountable control owners and risk stakeholders.
Enable governance through technology• Develop and administer Technology Governance workflows within Optro or an equivalent GRC platform for controls, assessments, evidence, issues, remediation, monitoring, and reporting.
• Partner with the Technology Framework Manager and Technology Policy Lead to maintain traceability across technology risks, regulatory requirements, policies, standards, procedures, controls, and reporting.
• Coordinate regulatory and framework change intake, impact assessment, mapping, and implementation tracking with appropriate subject-matter owners
• Identify opportunities for workflow automation, system integration, analytics, and responsible use of AI to improve control mapping, evidence management, assessments, and monitoring.
Sustain control readiness and monitoring• Partner with the Control Implementation Manager to transition newly operationalized controls into recurring assessment, evidence, monitoring, and reporting processes.
• Develop continuous and risk-based monitoring capabilities that provide timely visibility into control performance and emerging compliance gaps.
• Identify recurring evidence, process, or control weaknesses and coordinate sustainable remediation with control owners and relevant governance stakeholders.
• Develop training and guidance that enables control owners and participants to execute governance responsibilities consistently.
Drive reporting and stakeholder coordination• Establish compliance metrics covering control health, assessment completion, evidence readiness, deficiencies, remediation, and audit readiness.
• Partner with Data and Reporting resources to develop sustainable dashboards and management reporting using GRC, ServiceNow, Power BI, or equivalent technologies.
• Provide the Senior Director with accurate reporting and insights supporting executive communications regarding the state of the TechOps control environment.
• Coordinate across Technology Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external auditors to reduce duplication and maintain a unified governance approach.
Oversee Technology Policy Governance and risk tracking• Provide leadership and oversight of the Technology Policy Lead responsible for developing and operating the technology policy governance and risk tracking capability.
• Ensure technology policies and standards are appropriately developed, reviewed, approved, communicated, adopted, and monitored for compliance.
• Oversee technology risk identification, documentation, ownership, assessment, escalation, and tracking, maintaining visibility and accountability while enterprise risk management capabilities continue to mature.
• Support the identification and evaluation of emerging technology risks, including artificial intelligence, cybersecurity, data governance, third-party technology risk, and other evolving regulatory or operational exposures.
Experience Required- 7 or more years of progressive experience in IT governance, GRC, ITGC compliance, technology risk, or technology audit in a regulated environment
- Financial services or insurance experience strongly preferred
- Strong working knowledge of ITGCs, SOX, technology risk management, policy governance, and relevant regulatory and industry frameworks, including COBIT, COSO, NIST, ISO, NYDFS, and SOC reporting.
- Strong understanding of control design, evidence requirements, control self-assessments, audit readiness, deficiency management, remediation, continuous monitoring, technology policy lifecycle management, and risk tracking.
- Demonstrated experience with Optro or an equivalent GRC platform, including control, assessment, evidence, issue, remediation, workflow, and reporting capabilities
- Experience working within governance technology ecosystems incorporating SharePoint, Workiva, Seismic, ServiceNow, Power BI, or equivalent technologies
- Understands source-of-truth architecture, workflow design, regulatory and control mapping, and cross-platform data integrity
- Experience working directly with technology control owners, Information Security/GRC, Internal Controls/SOX, Risk Management, Internal Audit, Legal and Compliance, and external auditors.
- Experience leading governance professionals and overseeing technology policy and risk management activities, with awareness of emerging risks such as artificial intelligence, cybersecurity, data privacy, and third-party technology dependencies.
- Demonstrated ability to use automation, analytics, and emerging technologies to improve compliance operations and reduce manual governance activities
- Strong written and verbal communication skills with the ability to translate governance requirements into practical expectations for technology teams and provide clear reporting to leadership
The expected salary range for this position is $ 140,000 to $160,000 and will be impacted by factors such as the successful candidate's skills, experience and working location, as well as the specific position's business line, scope and level. HUB International is proud to offer comprehensive benefit and total compensation packages which could include health/dental/vision/life/disability insurance, FSA, HAS and 401(k) accounts, paid-time-off benefits such as vacation, sick, personal, floating holidays and company holidays. In addition, eligible annual bonuses, equity and commissions may be available for some positions.
What we offer youWe invest in your growth. HUB offers structured training, licensing support, and ongoing development opportunities designed to accelerate your career. Benefits and programs vary based on employment status, role, location, and applicable eligibility requirements.
- Competitive pay with comprehensive health benefits, retirement savings matching, and company-paid life and disability plans
- Generous paid time off, paid parental leave and a wellbeing program designed to support real work/life balance
- A collaborative, high-performing culture with meaningful engagement, community impact through HUB Gives and genuine room to grow your career
