Technology Governance Policy Lead

Hub International; Chicago (IL); Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Health/Dental/Vision Insurance

Life Insurance

Disability Insurance

FSA

HSA

401(k) plan

Bonus potential

Job summary

HUB International in Chicago, IL is seeking a Technology Governance Policy Lead to author and govern policy, translating SOX, SOC 2 and ITGC requirements into clear, enforceable language. You will drive approvals, map policy to operations, and ensure policy is actionable and auditable.

The role partners with Technology, Security, Operations, Legal, HR and Finance to maintain a proactive risk log, support executive decisions, and continually improve governance processes in a hybrid work

Qualifications

• Senior-level IT governance and policy development experience.
• Excellent writing for enforceable policy and executive briefs.
• Ability to translate regulatory requirements into policy language that satisfies auditors.

Responsibilities

• Author and govern policy, guiding policy owners and securing approvals.
• Maintain a running risk log and surface risk items with clear ownership.
• Conduct regulatory research and prepare concise briefs for Legal, HR, Finance, and Technology teams.
• Prepare decks and pre-reads for executive committee sessions and track decisions.

Skills

IT governance

Policy development

GRC

Policy writing

Executive presentation

SOX knowledge

SOC 2 knowledge

ITGC controls

Risk management

Regulatory translation

Education

Bachelor's degree in a related field

Job description

Technology Governance Policy Lead page is loaded## Technology Governance Policy Leadremote type: Hybrid Workinglocations: Chicago, ILtime type: Full timeposted on: Publicado hoyjob requisition id: R0039332**A path for every ambition.**At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day.We're creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another's success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them.Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here.Whether you're starting out or leveling up, you'll find the resources to evolve, the support to take on more and a team ready to back you at every stage.Your ambition has a home here.At HUB International, we are a team of entrepreneurs. We believe in protecting and supporting the aspirations of individuals, families, and businesses. We help our clients evaluate their risks and develop solutions tailored to their needs. We believe in empowering our employees to learn, grow, and make a difference. Our structure enables our teams to maintain their own unique, regional culture while leveraging support and resources from our corporate centers of excellence.HUB is a global insurance and employee benefits broker, providing a boundaryless array of business insurance, employee benefits, risk services, personal insurance, retirement, and private wealth management products and services. With over $5 billion in revenue and almost 20,000 employees in 600 offices throughout North America, HUB has grown substantially, in part due to our industry leading success in mergers and acquisitions**Position Summary**The Technology Governance team's Policy Lead develops and operates the policy and risk tracking capability within HUB's Technology Governance function. The role ensures technology policies are well written, approved, adopted, and enforced, and that technology risks stay visible and owned.The Policy Lead acts as an extension of Technology Governance leadership when engaging stakeholders, carrying governance priorities into working sessions and executive discussions and exercising judgment on what is negotiable and what must be escalated. The role is ERM-adjacent, not ERM: it maintains a focused risk log but does not own risk appetite, quantitative risk modeling, or enterprise risk methodology.The Policy Lead partners across Technology, Security, Operations, Legal, HR, and Finance to provide policy owners and control owners with a coordinated experience.**The Work****Author and govern policy*** Proctor policy authorship across teams, guiding and overseeing policy owners who write their own policies and setting expectations for format, quality, and consistency with HUB's standard policy format.* Author policies directly when needed and co-author with subject matter owners across Technology, Security, Operations, Legal, HR, and Finance, translating regulatory requirements (SOX, SOC 2, ITGC) into clear, enforceable, audit-ready policy language.* Socialize drafts with stakeholders before formal review to gather input, build understanding and buy-in, and surface objections early.* Chase approvals by tracking every policy in flight, following up directly with reviewers and approvers, and escalating when items stall.* Review policies for changes through periodic and event-driven reviews (regulatory updates, audit findings, incidents, organizational change), propose revisions, and maintain version control and an approval trail.* Map policy to operational activities by connecting each policy requirement to the processes, controls, and owners that carry it out.* Help craft implementation plans and enforcement mechanisms, including rollout steps, owners, timelines, compliance checks, accountability, and exception handling, working with control owners to make policies operational, not just approved.**Track and surface risk*** Maintain a running risk log across Technology and Operations activities.* Work with parties to ensure translation of regulatory and audit findings into tracked risk items with clear ownership.* Chase risk owners for status updates and flag stale, escalating, or orphaned risk items.* Keep the risk log structured and clean enough to be handed off intact when a formal ERM function stands up.**Research and support partner teams*** Perform research in support of Legal, HR, Finance, and Technology teams, covering regulatory and framework requirements, peer and industry practice, and policy precedent.* Translate research into concise, polished briefs that stakeholders can act on rather than raw findings.* Connect these functions when policy or risk questions cross team boundaries, flagging where input is needed before work proceeds.**Support executive decision-making*** Prepare clear, professional decks and pre-reads for executive committee sessions involving risk or policy decisions.* Present policy, risk, and research items to the committee when called on, framing the decision and supporting a clear outcome.* Maintain a decision log of what was decided, by whom, and what it requires, and follow through until actions are complete.**Experience Required*** Senior-level, progressive experience in IT governance, policy development, GRC, technology risk, or compliance in a regulated environment* Exceptional professional writing that is polished, precise, and audience-aware, from enforceable policy text to executive-ready briefs and decision records* Strong presentation skills, with the ability to present policy, risk, and research clearly and confidently to executive committees and cross-functional leaders and to field challenge in the room* Strong working knowledge of SOX, SOC 2, and ITGC control domains, with the ability to translate requirements into policy language that satisfies an auditor* Demonstrated discipline in owning and maintaining a risk or issue log and chasing stakeholders to closure* Strong research and synthesis skills, with the ability to turn regulatory, legal, or industry material into clear briefs for Legal, HR, Finance, and Technology audiences* Executive presence and political fluency to engage stakeholders at all levels.* Sound judgment about when to act within delegated authority and when to escalate* Preferred: audit readiness or compliance-by-default experience, including ITSM tooling and continuous improvement pipelines* Preferred: experience operating in a pre-formal-function environment, building scaffolding that a later, more formal team will inherit**Join Our Team****HUB International**, you will be part of a community of learners and doers focused on our Core Values: entrepreneurship, teamwork, integrity, accountability, and service.*The expected salary range for this position is $ 120,000 to $140,000 and will be impacted by factors such as the successful candidate's skills, experience and working location, as well as the specific position's business line, scope and level. HUB International is proud to offer comprehensive benefit and total compensation packages which could include health/dental/vision/life/disability insurance, FSA, HAS and 401(k) accounts, paid-time-off benefits such as vacation, sick, personal, floating holidays and company holidays. In addition, eligible annual bonuses, equity and commissions may be available for some positions.***What we offer you**We invest in your growth. HUB offers structured training, licensing