Position Summary

The Senior Director, Technology Governance develops and leads the Technology Governance function within HUB's Technology and Operations organization. The function is in its early stages, and the person hired into this position takes it from foundation to full operation, staffing it, maturing its operating model, and establishing its authority across TechOps service domains.

Technology Governance exists to operationalize control objectives established by operational leaders, Legal, Finance, Internal Audit, Information Security Governance, and the CCO into documented, evidenced, and audit-ready operational controls across all TechOps service domains. The function does not interpret regulatory requirements, but it develops the infrastructure that makes compliance a standing posture rather than a preparation event. A core design principle of this function is that controls must be wise for operational management, not just responsive to external mandate. Controls designed solely to satisfy an examiner create friction, get worked around, and ultimately fail to produce the evidence they were meant to generate. The Senior Director ensures the function designs controls that domain teams can actually run, proportionate to the risk, integrated into how operations already work, and sustainable without constant governance intervention.

This role leads a team that spans framework architecture, control operationalization, documentation and training, implementation coordination, compliance operations, and business continuity. The Senior Director, Technology Governance develops and grows that team, sets the standard for the work, represents the function to Internal Audit, executive management, and TechOps domain leadership, and ensures the function earns and keeps its authority through the quality of what it produces.

The Mandate

Develop the function

• Develop the Technology Governance function from its current early state to a fully operational discipline with a staffed team, defined operating model, and documented charter
• Establish the Technology Governance Library as the authoritative source of record for all governance documentation, including metadata schema, approval workflows, version control standards, and source of truth architecture across SharePoint, Optro or equivalent GRC platform, Workiva, and Seismic
• Define and activate the operating model: governance cadences, domain touchpoint rhythm, internal review cycles, and the reporting and escalation structure that connects the function to TechOps leadership, Internal Audit, and executive level management

Own the control framework

• Own the Technology Governance documentation framework, including the Risk to Regulation to Policy to Standard to SOP to Control to Reporting mapping chain, across all TechOps service domains
• Maintain regulatory traceability ensuring every active control is mapped to a regulatory or operational driver, a policy, a standard, an accountable owner, and an evidence type
• Ensure control deficiencies are documented, tracked, and driven to remediation.
• Produce Compliance Roadmaps, a sequenced, domain-by-domain plan with control ownership, evidence requirements, and milestone dates

Operationalize controls across TechOps domains

• Drive the operationalization of technology controls across TechOps service domains, sequencing discovery, process design, documentation, training, and go-live across multiple parallel initiatives
• Ensure every TechOps service domain has a complete, current, audit-ready documentation chain from operational policy through SOP and control document, produced and maintained by Technology Governance
• Build and sustain adoption, ensuring that controls are operationally real and producing desired outcomes
• Own the compliance reporting and monitoring function, leading a team that designs and sustains measurement and monitoring disciplines across TechOps service domains - ensuring controls produce evidence as a natural byproduct of operations rather than as a separate compliance activity.
• Provide structure, access and insight to a standing audit-ready posture, with well socialized evidence that is current, organized, retrievable and well understood by the domain teams responsible for producing it

Represent the function

• Represent the function with precision in executive settings
• Brief TechOps and enterprise leadership on the state of the control environment, regulatory traceability, and remediation progress, including gaps and risks
• Position Technology Governance as the enterprise model for operational control governance, with the framework designed from the start to extend beyond TechOps when the time comes

Experience Required

• 12 or more years of progressive experience in IT governance, GRC, or ITGC compliance, with at least 5 years in senior leadership roles carrying direct accountability for function outcomes in a regulated environment
• Financial services or insurance backgrounds are strongly preferred.
• Understands the full documentation tier structure from corporate policy through operational standards, SOPs, control documents, and domain records, and can enforce tier-appropriate content across a team producing documentation at volume
• Has worked directly with external auditors, knows how audit examinations work, what makes a control environment defensible, and how to represent a function's control posture in an examination without scrambling
• Deep working knowledge of SOX 404, PCAOB AS 2201, ITGC control domains, NYDFS 23 NYCRR 500, SOC 2, COSO 2013, ISO 31000, COBIT, and the Three Lines Model
• Demonstrated track record of building governance infrastructure including proficiency with Optro or an equivalent GRC platform, SharePoint governance library design, and ServiceNow/Power BI or equivalent reporting tools as the compliance monitoring and dashboard layer
• Understands the governance platform ecosystem well enough to make architectural decisions about source of truth, workflow design, and cross-platform data integrity, coordinating with teams that build and maintain all system components
• Develops people toward their potential providing coaching, clarity, and space to build capability
• Operates with credible authority across a complex stakeholder environment, building trust and confidence in the governance framework and capability, moving work and decisions across peer functions
• Represents the function with precision in executive settings to provide a consistent and honest picture of where the control environment stands
• Produces governance documentation, executive briefings, audit responses, and internal communications that are clear, precise, and do not require editing before they represent the function

• Holds a clear writing standard for the team and enforces it

The expected salary range for this position is $ 190,000 to $220,000 and will be impacted by factors such as the successful candidate's skills, experience and working location, as well as the specific position's business line, scope and level. HUB International is proud to offer comprehensive benefit and total compensation packages which could include health/dental/vision/life/disability insurance, FSA, HAS and 401(k) accounts, paid-time-off benefits such as vacation, sick, personal, floating holidays and company holidays. In addition, eligible annual bonuses, equity and commissions may be available for some positions.

Department Information Technology

Required Experience: 10-15 years of relevant experience

Required Travel: Negligible

Required Education: Bachelor's degree (4-year degree)