Technology Governance Associate

A path for every ambition.

At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day.

We’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them.

Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here.

Whether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage.

Your ambition has a home here.

ABOUT US

At HUB International, we are a team of entrepreneurs. We believe in protecting and supporting the aspirations of individuals, families, and businesses. We help our clients evaluate their risks and develop solutions tailored to their needs. We believe in empowering our employees to learn, grow, and make a difference. Our structure enables our teams to maintain their own unique, regional culture while leveraging support and resources from our corporate centers of excellence.

HUB is a global insurance and employee benefits broker, providing a boundaryless array of business insurance, employee benefits, risk services, personal insurance, retirement, and private wealth management products and services. With over $5 billion in revenue and almost 20,000 employees in 600 offices throughout North America, HUB has grown substantially, in part due to our industry leading success in mergers and acquisitions

Position Summary

The Technology Governance Associate supports the development, implementation, and ongoing operation of technology governance, risk, and compliance activities across HUB Technology & Operations. This is a hands-on, cross-functional role that works closely with Technology Governance leadership and team members to execute activities related to control framework development, control implementation, process documentation, compliance operations, and governance technology enablement.

The role supports the full governance and control lifecycle, including blueprint development, discovery, gap identification, remediation tracking, evidence management, continuous monitoring, and reporting. Responsibilities will evolve based on team priorities, requiring flexibility, strong execution skills, and the ability to contribute across multiple workstreams.

The primary focus of the role is supporting HUB TechOps’ IT General Controls and related technology governance activities. Familiarity with broader areas such as cybersecurity, privacy, resilience, third-party technology risk, data governance, and emerging technology governance is helpful but not required. These areas may become part of the role as business needs and team priorities evolve.

The successful candidate is organized, analytical, detail-oriented, and comfortable working with multiple stakeholders to translate governance requirements into practical deliverables.

The Work

Control Framework and Documentation Support

Assist with developing and maintaining technology control blueprints, implementation guides, discovery workbooks, evidence schedules, standard operating procedures, and other governance deliverables.

Support the documentation and maintenance of control objectives, control activities, execution requirements, evidence expectations, and ownership responsibilities.

Assist with mapping relationships between risks, regulatory requirements, policies, standards, procedures, applications, and technology controls.

Support governance activities primarily related to IT General Controls and other applicable technology risk domains.

Identify documentation gaps, inconsistencies, and opportunities to standardize governance artifacts across technology domains.

Support documentation quality reviews, updates, and publication activities in accordance with established framework standards.

Apply knowledge of broader governance areas, such as cybersecurity, privacy, resilience, third-party risk, data governance, or emerging technology, when relevant to assigned work.

Control Discovery and Implementation Support

Participate in discovery sessions with application owners, system administrators, process owners, and other technology representatives.

Document current-state processes, control activities, roles and responsibilities, system dependencies, and supporting evidence.

Assist with identifying gaps between existing processes and established control requirements.

Translate discovery findings into documented implementation actions, remediation items, and follow-up activities.

Support the development of process narratives, workflows, RACI matrices, risk assessments, and operating procedures.

Coordinate with control owners to obtain required documentation, clarify outstanding questions, and support implementation readiness.

Assist with assessing how changes in technology, processes, or regulatory expectations may affect existing governance, risk, control, and compliance requirements.

Compliance Operations and Continuous Monitoring

• •Support ongoing control monitoring, evidence readiness, remediation tracking, and compliance reporting activities.
• •Assist with maintaining evidence schedules, control inventories, ownership records, and recurring compliance calendars.
• •Collect, organize, and review control documentation and evidence for completeness against established requirements.
• •Support the development and maintenance of control performance metrics, KPIs, exception reporting, and monitoring dashboards.
• •Assist with documenting control deficiencies, tracking corrective actions, and preparing status updates.
• •Support future control self-assessment activities as the Technology Governance operating model matures.
• •Support the identification of changes in regulatory expectations, industry practices, and technology risks that may require updates to governance documentation or controls.

Governance Technology and Workflow Enablement

Support the use of approved governance, risk, and compliance platforms to manage control records, implementation workflows, gaps, remediation, evidence, and reporting.

Assist with workflow documentation, configuration support, user acceptance testing, and process improvements under the direction of functional leads and authorized platform administrators.

Maintain accurate control and compliance information within approved systems.

Identify opportunities to reduce manual activities through automation, standardized workflows, and improved reporting.

Support coordination and data consistency across approved governance platforms, SharePoint, AuditBoard (Optro), and other relevant systems.

Assist with developing reports, dashboards, and workflow enhancements that improve visibility into control performance, remediation, and compliance obligations.

Experience Required

Technology Governance, Risk and Controls Knowledge

Strong working knowledge of SOX 404, PCAOB AS 2201, ITGC control domains, NYDFS 23 NYCRR 500, SOC 2, COSO 2013, ISO 31000, COBIT, and the Three Lines Model

Ability to interpret established control requirements, assess operational practices, identify gaps, and support practical control implementation and remediation.

Process Analysis and Documentation

• •Demonstrated ability to conduct process discovery, analyze current-state activities, and develop control blueprints, process narratives, workflows, risk assessments, and other governance deliverables.
• •Strong analytical skills and attention to detail, with the ability to transl