Technology Controls Framework Manager
Chicago, IL - USA
Job Summary
ABOUT US
At HUB International we are a team of entrepreneurs. We believe in protecting and supporting the aspirations of individuals families and businesses. We help our clients evaluate their risks and develop solutions tailored to their needs. We believe in empowering our employees to learn grow and make a difference. Our structure enables our teams to maintain their own unique regional culture while leveraging support and resources from our corporate centers of excellence.
HUB is a global insurance and employee benefits broker providing a boundaryless array of business insurance employee benefits risk services personal insurance retirement and private wealth management products and services. With over $5 billion in revenue and almost 20000 employees in 600 offices throughout North America HUB has grown substantially in part due to our industry leading success in mergers and acquisitions
Position Summary
The Technology Controls Framework Manager is the architect custodian and champion of Technology Governances documentation framework. This role defines how the functions governance artifacts are structured maintained and connected and holds that standard with the authority and persistence required to make it stick across TechOps service domains.
The operating mandate is straightforward: build the framework maintain it and track it across technology domains and platforms. That requires someone who can architect governance infrastructure and collaborate across a complex multi-domain organization. The Technology Controls Framework Manager succeeds by building working trust with Domain Leads partnering closely with the Governance Documentation Specialist and the Process and Controls Advisor and holding the framework standard through influence rather than positional authority.
At the center of this role is the logistical mapping of documentation to represent and operationalize the following: the Risk Regulation Policy Standard SOP Control and Reporting chains. The Technology Controls Framework Manager owns the coherence of that chain across HUBs technology domains. When something changes or breaks in the chain (a control that cannot be traced to a regulation a policy with no operational standard beneath it a domain record with no corresponding control) this role finds it names it and drives it to resolution.
This is a working Senior Manager role. The Technology Controls Framework Manager does the work directly: building templates configuring platforms and maintaining the framework as a hands-on practitioner.
The Work
Framework architecture and stewardship
- Own the Technology Governance documentation framework includingtier structure content boundaries naming conventions voice standards and template design as the authoritative standard against which all governance artifacts are measured
- Maintain logistical mapping of the Risk -> Regulation -> Policy -> Standard -> SOP -> Control -> Reporting documentation chains across all TechOps service domains identifying breaks gaps and inconsistencies and driving them to resolution
- Design and maintain document templates for each documentation tier of the framework ensuring templates enforce tier-appropriate content boundaries and are consistently applied across all domains
- Track documentation gaps across all tiers and domains and maintain an accurate current picture of what exists what is missing and what is overdue
- Actively manage documentation lifecycles: flag documents approaching review cycles identify orphaned content and ensure version history tells a coherent audit story
- Champion documentation discipline across the function and with Domain Leads holding the framework standard through influence not mandate
Platform Architecture & Administration
- Own and administer the Technology Governance Library in SharePoint including document library architecture content types metadata schema column taxonomy permissions model and search configuration
- Design and maintain Power Automate approval workflows including document progression gates Policy Statement approval chains notification triggers and lifecycle automation that enforces a multi-tier approval model
- Configure and enforce version control standards: major and minor versioning check-in/check-out discipline retention policies and the audit trail that makes version history defensible
- Configure and utilize the control registry and audit workflow platform including control records evidence capture configuration deficiency tracking workflows and audit status management with proficiency established at hire or within 90 days
- Maintain source of truth architecture across the full platform ecosystem: SharePoint as the authoritative governance library GRCs control registry platform Workiva as the SOX attestation layer and Seismic as the all-employee publication layer
- Broker document flow between platforms knowing which document type belongs in which system in what format at what stage and enforce the boundaries that prevent duplication contradiction and source of truth confusion
- Ensure updates propagate correctly across platforms; for example a document revision in SharePoint has downstream implications in the control registry Workiva and/or Seismic that the Framework Manager tracks and manages
Documentation Lifecycle Management
- Serve as the authoritative gatekeeper for document publication so that no governance artifact advances to published status without meeting framework standards for structure tier-appropriate content metadata completeness and approval chain compliance
- Pursue and collect documentation across TechOps service domains knowing what is owed when it is owed and follow up when it is missing without waiting to be asked
- Maintain the Policy Statements List as a peer governance object tracking changes approvals and linkage to supporting documents and ensuring the approval gate prevents documents from advancing until all linked Policy Statements are approved
- Coordinate with the Governance Documentation Specialist on document production as the Framework Manager sets the standard and owns the architecture; the Specialist produces content within it
Regulatory Traceability & Mapping
- Synchronized with Legal and GRC teams identification and interpretation of regulatory requirements maintain documented linkages between regulatory obligations ITGC NYDFS 23 NYCRR 500 SOC 2 and the controls that address them across TechOps service domains
- Identify mapping gaps: controls without regulatory anchors regulations without corresponding controls and policy statements without operational standards beneath them
- Keep the mapping current as the regulatory environment the control framework and TechOps domains evolve
- Produce traceability documentation that satisfies auditor requests without requiring preparation the linkages are maintained continuously not assembled on demand
Capabilities Required
Framework architecture and governance literacy
- Has built or significantly contributed to a governance documentation framework in a regulated environment not just operated inside one someone else designed
- Understands the full documentation tier structure and the content boundaries between tiers including corporate policy corporate standards operational policy operational standards SOPs control documents monitoring reports control evidence reports and domain records
- Deep working knowledge of ITGC control requirements and what operationalized audit-ready controls look like in practice
- Familiar with ITIL COSO COBIT or equivalent frameworks as design tools applying them to build something real not to cite them in presentations
- Understands what external auditors examine and what makes a control environment defensible with enough audit exposure to design for scrutiny not just for internal consumption
Platform Expertise
- SharePoint document library architecture including content types column schemas metadata taxonomy permissions model and search configuration designed for governance use rather than general file storage
- Power Automate workflow design including approval chains lifecycle automation notification triggers and gate logic that enforces governance standards without requiring manual intervention
- Version control configuration and discipline including major/minor versioning retention policies and audit trail management that produces a defensible document history
- Optro or equivalent GRC platform administration including control registry configuration evidence capture workflow deficiency tracking and audit status management with proficiency at hire or within 90 days
- Cross-platform source of truth architecture: understands how SharePoint Optro Workiva and Seismic each serve a different layer of the governance ecosystem and maintains the boundaries and linkages between them
Analytical & Systems Thinking
- Sees how things connect across regulation policy standard control and reporting and identifies breaks in the chain that others miss
- Maintains accuracy and coherence across a complex multi-domain multi-platform documentation environment without losing track of the whole
- Reads a document and identifies tier boundary violations missing linkages and structural inconsistencies without being prompted
- Tracks gaps overdue items and lifecycle events across the full framework and builds the systems that make that tracking sustainable over time
Collaboration & Influence
- Diplomatically persistent: holds the framework standard under pressure from domain teams and senior stakeholders without becoming an obstacle
- Builds credibility through expertise and follow-through. The authority to hold the line comes from knowing the material better than anyone else in the room
- Works closely with the Governance Documentation Specialist the Process and Controls Advisor and Domain Leads. The framework succeeds through partnership not position
- Hands-on practitioner who does the work at full quality and owns outcomes directly
Background
The right candidate has built governance documentation frameworks in regulated environments and has the experience to prove it. They have seen frameworks fail in production watched audit findings land on gaps they designed around and built something better because of it. Financial services or insurance backgrounds are strongly preferred; the regulatory context is specific and the learning curve matters.
Proficiency with Optro or an equivalent GRC platform is required at hire or demonstrated within 90 days. SharePoint library architecture experience is required at hire. Familiarity with Power Automate Workiva and Seismic is a meaningful differentiator. What matters most is a track record of building governance infrastructure that held up when auditors examined it and a disposition toward doing the work rather than directing others to do it.
Backgrounds that define this candidate include:
- Platform administration experience in SharePoint governance library design GRC platform configuration or equivalent with hands-on ownership of the architecture rather than user-level familiarity
- GRC framework design and administration in a financial services or insurance environment with direct accountability for ITGC control documentation mapping and audit readiness
- Familiarity with internal audit activities and what auditors look for when assessing control environments with enough exposure to design frameworks that hold up under examination
JOIN OUR TEAM
Do you believe in the power of innovation collaboration and transformation Do you thrive in a supportive and client focused work environment Are you looking for an opportunity to help build and drive change in a rapidly growing and evolving organization When you joinHUB International you will be part of a community of learners and doers focused on our Core Values: entrepreneurship teamwork integrity accountability and service.
The expected salary range for this position is $ 130000 to $150000 and will be impacted by factors such as the successful candidates skills experience and working location as well as the specific positions business line scope and level. HUB International is proud to offer comprehensive benefit and total compensation packages which could include health/dental/vision/life/disability insurance FSA HAS and 401(k) accounts paid-time-off benefits such as vacation sick personal floating holidays and company addition eligible annual bonuses equity and commissions may be available for some positions.
HUB International Limited is an equal opportunity employer that does not discriminate on the basis of race/ethnicity national origin religion age color sex sexual orientation gender identity disability or veterans status or any other characteristic protected by local state or federal laws rules or regulations.
We endeavor to make this website accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process please contact the recruiting team. This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.
Required Experience:
Manager
About Company
HUB International is a leading North American insurance brokerage that provides employee benefits, business, and personal insurance products and services.