Operational Compliance Manager

5H0 Hub International Limited; Chicago (IL); On-site; USD 140,000 - 160,000; Full time

Job summary

HUB International seeks an Operational Compliance Manager to lead compliance operations, technology policy governance, and risk tracking within Technology Governance. The role partners with multiple teams to ensure controls are evidenced, assessed, monitored, and audit-ready, leveraging a modern GRC platform to streamline evidence collection and reporting.

Applicants should have significant experience in IT governance, SOX/control testing, and risk management, with a track record of reducing

Responsibilities

• Establish and manage recurring control self‑assessments, evidence collection, review, and audit readiness.
• Coordinate control testing and audit‑readiness activities with owners, Internal Audit, GRC, and external auditors.
• Track identified control deficiencies through remediation and closure with risk stakeholders.
• Develop and administer technology governance workflows for controls, assessments, evidence, issues, and reporting.

Job description

A path for every ambition. At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day. We’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them. Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here. Whether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage. Your ambition has a home here.

ABOUT US

At HUB International, we are a team of entrepreneurs. We believe in protecting and supporting the aspirations of individuals, families, and businesses. We help our clients evaluate their risks and develop solutions tailored to their needs. We believe in empowering our employees to learn, grow, and make a difference. Our structure enables our teams to maintain their own unique, regional culture while leveraging support and resources from our corporate centers of excellence. HUB is a global insurance and employee benefits broker, providing a boundaryless array of business insurance, employee benefits, risk services, personal insurance, retirement, and private wealth management products and services. With over $5 billion in revenue and almost 20,000 employees in 600 offices throughout North America, HUB has grown substantially, in part due to our industry leading success in mergers and acquisitions.

Position Summary

The Operational Compliance Manager develops and oversees the compliance operations, technology policy governance, and risk tracking capabilities within HUB's Technology Governance function. The role ensures technology controls remain evidenced, assessed, monitored, remediated, and audit-ready after implementation, while providing oversight of technology policy lifecycle management and visibility into technology risks. Working closely with the Technology Controls Framework Manager and Control Implementation Manager, this role establishes sustainable governance processes for control self‑assessments, evidence management, audit readiness, remediation, regulatory change coordination, continuous monitoring, and compliance reporting. The Manager also helps operationalize Optro or an equivalent GRC platform as the workflow and monitoring backbone for Technology Governance, reducing reliance on manual evidence collection and fragmented compliance processes. The Senior Manager partners across Technology&Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external auditors to provide control owners with a coordinated and sustainable governance experience.

Operate the compliance lifecycle

• Establish and manage recurring control self‑assessments, evidence collection and review, compliance calendars, audit readiness, issue management, remediation tracking, and escalation processes.
• Ensure control evidence is current, complete, retrievable, and aligned to defined control attributes and evidence requirements.
• Coordinate control testing and audit‑readiness activities with control owners, Internal Controls/SOX, Internal Audit, GRC, and external auditors.
• Track identified control deficiencies through remediation and closure, coordinating with accountable control owners and risk stakeholders.

Enable governance through technology

• Develop and administer Technology Governance workflows within Optro or an equivalent GRC platform for controls, assessments, evidence, issues, remediation, monitoring, and reporting.
• Partner with the Technology Framework Manager and Technology Policy Lead to maintain traceability across technology risks, regulatory requirements, policies, standards, procedures, controls, and reporting.
• Coordinate regulatory and framework change intake, impact assessment, mapping, and implementation tracking with appropriate subject‑matter owners.

Identify opportunities for workflow automation, system integration, analytics, and responsible use of AI to improve control mapping, evidence management, assessments, and monitoring

• Identify opportunities for workflow automation, system integration, analytics, and responsible use of AI to improve control mapping, evidence management, assessments, and monitoring.

Sustain control readiness and monitoring

• Partner with the Control Implementation Manager to transition newly operationalized controls into recurring assessment, evidence, monitoring, and reporting processes.
• Develop continuous and risk‑based monitoring capabilities that provide timely visibility into control performance and emerging compliance gaps.
• Identify recurring evidence, process, or control weaknesses and coordinate sustainable remediation with control owners and relevant governance stakeholders.
• Develop training and guidance that enables control owners and participants to execute governance responsibilities consistently.

Drive reporting and stakeholder coordination

• Establish compliance metrics covering control health, assessment completion, evidence readiness, deficiencies, remediation, and audit readiness.
• Partner with Data and Reporting resources to develop sustainable dashboards and management reporting using GRC, ServiceNow, Power BI, or equivalent technologies.
• Provide the Senior Director with accurate reporting and insights supporting executive communications regarding the state of the TechOps control environment.
• Coordinate across Technology Operations, Information Security Governance/GRC, Internal Controls/SOX, Risk Management, Legal and Compliance, Internal Audit, and external auditors to reduce duplication and maintain a unified governance approach.

Oversee Technology Policy Governance and risk tracking

• Provide leadership and oversight of the Technology Policy Lead responsible for developing and operating the technology policy governance and risk tracking capability.
• Ensure technology policies and standards are appropriately developed, reviewed, approved, communicated, adopted, and monitored for compliance.
• Oversee technology risk identification, documentation, ownership, assessment, escalation, and tracking, maintaining visibility and accountability while enterprise risk management capabilities continue to mature.
• Support the identification and evaluation of emerging technology risks, including artificial intelligence, cybersecurity, data governance, third‑party technology risk, and other evolving regulatory or operational exposures.

Experience Required

7 or more years of progressive experience in IT governance, GRC, ITGC compliance, technology risk, or technology audit in a regulated environment.

Financial services or insurance experience strongly preferred.

Strong working knowledge of ITGCs, SOX, technology risk management, policy governance, and relevant regulatory and industry frameworks, including COBIT, COSO, NIST, ISO, NYDFS, and SOC reporting.

Strong understanding of control design, evidence requirements, control self‑assessments, audit readiness, deficiency management, remediation, continuous monitoring, technology policy lifecycle management, and risk tracking.

Demonstrated experience with Optro or an equivalent GRC platform, including control, assessment, evidence, issue, remediation, workflow, and reporting capabilities.

Experience working within governance technology ecosystems incorporating SharePoint, Workiva, Seismic, ServiceNow, Power BI, or equivalent technologies.

Understands source‑of‑truth architecture, workflow design, regulatory and control mapping, and cross‑platform data integrity.

Experience working directly with technology control owners, Information Security/GRC, Internal Controls/SOX, Risk Management, Internal Audit, Legal and Compliance, and external auditors.

Experience leading governance professionals and overseeing technology policy and risk management activities, with awareness of emerging risks such as artificial intelligence, cybersecurity, data privacy, and third‑party technology dependencies.

Demonstrated ability to use automation, analytics, and emerging technologies to improve compliance operations and reduce manual governance activities.

Strong written and verbal communication skills with the ability to translate governance requirements into practical expectations for technology teams and provide clear reporting to leadership.

JOIN OUR TEAM

Do you believe in the power of innovation, collaboration, and transformation? Do you thrive in a supportive and client focused work environment? Are you looking for an opportunity to help build and drive change in a rapidly growing and evolving organization?

What we offer you

The expected salary range for this position is $ 140,000 to $160,000 and will be impacted by factors such as the successful candidate’s skills, experience and working location, as well as the specific position’s business line, scope and level.

HUB International is proud to offer comprehensive benefit and total compensation packages which could include health/dental/vision/life/disability insurance, FSA, HAS and 401(k) accounts, paid‑time‑off benefits such as vacation, sick, personal, floating holidays and company holidays.

In addition, eligible annual bonuses, equity and commissions may be available for some positions.

Benefits and programs vary based on employment status, role, location, and applicable eligibility requirements.

Competitive pay with comprehensive health benefits, retirement savings matching, and company‑paid life and disability plans.

Generous paid time off, paid parental leave and a wellbeing program designed to support real work/life balance.

A collaborative, high‑performing culture with meaningful engagement, community impact through HUB Gives and genuine room to grow your career.

The HUB difference HUB International is one of North America’s largest insurance brokers, delivering risk management, insurance, employee benefits, retirement and wealth management solutions to businesses and individuals across the United States and Canada — through locally led teams backed by national expertise, giving you the agility of a local partner and the reach of a global organization.

Equal Employment Opportunity: HUB International Limited is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

Reasonable Accommodations

HUB International Limited is committed to providing reasonable accommodations to qualified individuals with disabilities throughout the application and hiring process. If you need a reasonable accommodation to access our career site, complete an application, or participate in any part of the hiring process, please contact the Recruiting Team at [e-mail]. This contact information is for accommodation requests only and should not be used to inquire about the status of an application.

E-Verify

HUB International Limited participates in E-Verify. Please refer to Our Recruiting Process | Applicant Notices: E-Verify Program for additional information.

HUB International is one of North America’s largest insurance brokers, delivering risk management, insurance, employee benefits, retirement and wealth management solutions to businesses and individuals across the United States and Canada — through locally led teams backed by national expertise, giving you the agility of a local partner and the reach of a global organization.