Operational Compliance Manager

A path for every ambition.

At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day.

We’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them.

Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here.

Whether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage.

Your ambition has a home here.

ABOUT US

At HUB International, we are a team of entrepreneurs. We believe in protecting and supporting the aspirations of individuals, families, and businesses. We help our clients evaluate their risks and develop solutions tailored to their needs. We believe in empowering our employees to learn, grow, and make a difference. Our structure enables our teams to maintain their own unique, regional culture while leveraging support and resources from our corporate centers of excellence.

HUB is a global insurance and employee benefits broker, providing a boundaryless array of business insurance, employee benefits, risk services, personal insurance, retirement, and private wealth management products and services. With over $5 billion in revenue and almost 20,000 employees in 600 offices throughout North America, HUB has grown substantially, in part due to our industry leading success in mergers and acquisitions.

Position Summary

The Operational Compliance Manager develops and oversees the compliance operations, technology policy governance, and risk tracking capabilities within HUB's Technology Governance function. The role ensures technology controls remain evidenced, assessed, monitored, remediated, and audit-ready after implementation, while providing oversight of technology policy lifecycle management and visibility into technology risks.

Working closely with the Technology Controls Framework Manager and Control Implementation Manager, this role establishes sustainable governance processes for control self-assessments, evidence management, audit readiness, remediation, regulatory change coordination, continuous monitoring, and compliance reporting. The Manager also helps operationalize Optro or an equivalent GRC platform as the workflow and monitoring backbone for Technology Governance, reducing reliance on manual evidence collection and fragmented compliance processes.

The Senior Manager partners across Technology & Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external auditors to provide control owners with a coordinated and sustainable governance experience.

The Work

Operate the compliance lifecycl e

· Establish and manage recurring control self-assessments, evidence collection and review, compliance calendars, audit readiness, issue management, remediation tracking, and escalation processes.

· Ensure control evidence is current, complete, retrievable, and aligned to defined control attributes and evidence requirements.

· Coordinate control testing and audit-readiness activities with control owners, Internal Controls/SOX, Internal Audit, GRC, and external auditors.

· Track identified control deficiencies through remediation and closure, coordinating with accountable control owners and risk stakeholders.

Enable governance through technology

· Develop and administer Technology Governance workflows within Optro or an equivalent GRC platform for controls, assessments, evidence, issues, remediation, monitoring, and reporting.

· Partner with the Technology Framework Manager and Technology Policy Lead to maintain traceability across technology risks, regulatory requirements, policies, standards, procedures, controls, and reporting.

· Coordinate regulatory and framework change intake, impact assessment, mapping, and implementation tracking with appropriate subject-matter owners .

· Identify opportunities for workflow automation, system integration, analytics, and responsible use of AI to improve control mapping, evidence management, assessments, and monitoring.

Sustain control readiness and monitoring

· Partner with the Control Implementation Manager to transition newly operationalized controls into recurring assessment, evidence, monitoring, and reporting processes.

· Develop continuous and risk-based monitoring capabilities that provide timely visibility into control performance and emerging compliance gaps.

· Identify recurring evidence, process, or control weaknesses and coordinate sustainable remediation with control owners and relevant governance stakeholders.

· Develop training and guidance that enables control owners and participants to execute governance responsibilities consistently.

Drive reporting and stakeholder coordinatio n

· Establish compliance metrics covering control health, assessment completion, evidence readiness, deficiencies, remediation, and audit readiness.

· Partner with Data and Reporting resources to develop sustainable dashboards and management reporting using GRC, ServiceNow, Power BI, or equivalent technologies.

· Provide the Senior Director with accurate reporting and insights supporting executive communications regarding the state of the TechOps control environment.

· Coordinate across Technology Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external auditors to reduce duplication and maintain a unified governance approach.

Oversee Technology Policy Governance and risk tracki ng

· Provide leadership and oversight of the Technology Policy Lead responsible for developing and operating the technology policy governance and risk tracking capability.

· Ensure technology policies and standards are appropriately developed, reviewed, approved, communicated, adopted, and monitored for compliance.

· Oversee technology risk identification, documentation, ownership, assessment, escalation, and tracking, maintaining visibility and accountability while enterprise risk management capabilities continue to mature.

· Support the identification and evaluation of emerging technology risks, including artificial intelligence, cybersecurity, data governance, third-party technology risk, and other evolving regulatory or operational exposures.

Experience Required

7 or more years of progressive experience in IT governance, GRC, ITGC compliance, technology risk, or technology audit in a regulated environment

Financial services or insurance experience strongly preferred

Strong working knowledge of ITGCs, SOX, technology risk management, policy governance, and relevant regulatory and industry frameworks, including COBIT, COSO, NIST, ISO, NYDFS, and SOC reporting.

Strong understanding of control design, evidence requirements, control self-assessments, audit readiness, deficiency management, remediation, continuous monitoring, technology policy lifecycle management, and risk tracking.

Demonstrated experience with Optro or an equivalent GRC platform, including control, assessment, evidence, issue, remediation, workflow, and reporting capabilities

Experience working within governance technology ecosystems incorporating SharePoint, Workiva, Seismic, ServiceNow, Power BI, or equivalent technologies

Understands source-of-truth architecture, workflow design, regulatory and control mapping, and cross-platform data integrity

Experience working directly with technology control