H

HUB

Global insurance brokerage with risk management

Operational Compliance Manager

Security Governance, Risk & ComplianceUpdated on Nov 5
Full-timeChicago, IL, USAHybrid

About the Job

Requirements

  • At least 7 years of progressive experience in IT governance, GRC, ITGC compliance, technology risk, or technology audit in a regulated environment.
  • Strong working knowledge of ITGCs, SOX, technology risk management, policy governance, and relevant regulatory and industry frameworks, including COBIT, COSO, NIST, ISO, NYDFS, and SOC reporting.
  • Strong understanding of control design, evidence requirements, control self-assessments, audit readiness, deficiency management, remediation, continuous monitoring, technology policy lifecycle management, and risk tracking.
  • Demonstrated experience with Optro or an equivalent GRC platform, including control, assessment, evidence, issue, remediation, workflow, and reporting capabilities.
  • Experience working within governance technology ecosystems incorporating SharePoint, Workiva, Seismic, ServiceNow, Power BI, or equivalent technologies.
  • Understanding of source-of-truth architecture, workflow design, regulatory and control mapping, and cross-platform data integrity.
  • Experience working directly with technology control owners, Information Security/GRC, Internal Controls/SOX, Risk Management, Internal Audit, Legal and Compliance, and external auditors.
  • Experience leading governance professionals and overseeing technology policy and risk management activities, with awareness of emerging risks such as artificial intelligence, cybersecurity, data privacy, and third-party technology dependencies.
  • Demonstrated ability to use automation, analytics, and emerging technologies to improve compliance operations and reduce manual governance activities.
  • Strong written and verbal communication skills, with the ability to translate governance requirements into practical expectations for technology teams and provide clear reporting to leadership.

Responsibilities

  • Establish and manage recurring control self-assessments, evidence collection and review, compliance calendars, audit readiness, issue management, remediation tracking, and escalation processes.
  • Ensure control evidence is current, complete, retrievable, and aligned to defined control attributes and evidence requirements.
  • Coordinate control testing and audit-readiness activities with control owners, Internal Controls/SOX, Internal Audit, GRC, and external auditors.
  • Track identified control deficiencies through remediation and closure, coordinating with accountable control owners and risk stakeholders.
  • Develop and administer Technology Governance workflows within Optro or an equivalent GRC platform for controls, assessments, evidence, issues, remediation, monitoring, and reporting.
  • Partner with the Technology Framework Manager and Technology Policy Lead to maintain traceability across technology risks, regulatory requirements, policies, standards, procedures, controls, and reporting.
  • Coordinate regulatory and framework change intake, impact assessment, mapping, and implementation tracking with appropriate subject-matter owners.
  • Identify opportunities for workflow automation, system integration, analytics, and responsible use of AI to improve control mapping, evidence management, assessments, and monitoring.
  • Partner with the Control Implementation Manager to transition newly operationalized controls into recurring assessment, evidence, monitoring, and reporting processes.
  • Develop continuous and risk-based monitoring capabilities that provide timely visibility into control performance and emerging compliance gaps.
  • Identify recurring evidence, process, or control weaknesses and coordinate sustainable remediation with control owners and relevant governance stakeholders.
  • Develop training and guidance that enables control owners and participants to execute governance responsibilities consistently.
  • Establish compliance metrics covering control health, assessment completion, evidence readiness, deficiencies, remediation, and audit readiness.
  • Partner with Data and Reporting resources to develop sustainable dashboards and management reporting using GRC, ServiceNow, Power BI, or equivalent technologies.
  • Provide the Senior Director with accurate reporting and insights supporting executive communications regarding the state of the TechOps control environment.
  • Coordinate across Technology Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external auditors to reduce duplication and maintain a unified governance approach.
  • Provide leadership and oversight of the Technology Policy Lead responsible for developing and operating the technology policy governance and risk tracking capability.
  • Ensure technology policies and standards are appropriately developed, reviewed, approved, communicated, adopted, and monitored for compliance.
  • Oversee technology risk identification, documentation, ownership, assessment, escalation, and tracking, maintaining visibility and accountability while enterprise risk management capabilities continue to mature.
  • Support the identification and evaluation of emerging technology risks, including artificial intelligence, cybersecurity, data governance, third-party technology risk, and other evolving regulatory or operational exposures.

Desired Qualifications

  • Financial services or insurance experience is strongly preferred.

About the Company

HUB

Global insurance brokerage with risk management

HUB International is a global insurance broker offering property and casualty, life and health, employee benefits, investment, and risk management services. It works through a decentralized network of local North American offices and grows by acquiring smaller brokerages to expand reach, delivering tailored insurance and advisory solutions. Its size and distributed structure combine local market knowledge with global resources to serve individuals, families, and businesses across industries like construction and healthcare. The goal is to help clients manage risk, protect assets, and achieve financial stability through comprehensive, integrated insurance and risk management services.

Company size
10,001+
Company stage
IPO
Headquarters
Chicago, IL
Founded
1998

Recently Posted Jobs

Explore more opportunities at HUB

See more jobs