Technology Governance Policy Lead

A path for every ambition.

At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day.

We’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them.

Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here.

Whether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage.

Your ambition has a home here.

About Us

At HUB International, we are a team of entrepreneurs. We believe in protecting and supporting the aspirations of individuals, families, and businesses. We help our clients evaluate their risks and develop solutions tailored to their needs. We believe in empowering our employees to learn, grow, and make a difference. Our structure enables our teams to maintain their own unique, regional culture while leveraging support and resources from our corporate centers of excellence.

HUB is a global insurance and employee benefits broker, providing a boundaryless array of business insurance, employee benefits, risk services, personal insurance, retirement, and private wealth management products and services. With over $5 billion in revenue and almost 20,000 employees in 600 offices throughout North America, HUB has grown substantially, in part due to our industry leading success in mergers and acquisitions

Position Summary

The Technology Governance team’s Policy Lead develops and operates the policy and risk tracking capability within HUB’s Technology Governance function. The role ensures technology policies are well written, approved, adopted, and enforced, and that technology risks stay visible and owned.

The Policy Lead acts as an extension of Technology Governance leadership when engaging stakeholders, carrying governance priorities into working sessions and executive discussions and exercising judgment on what is negotiable and what must be escalated. The role is ERM-adjacent, not ERM: it maintains a focused risk log but does not own risk appetite, quantitative risk modeling, or enterprise risk methodology.

The Policy Lead partners across Technology, Security, Operations, Legal, HR, and Finance to provide policy owners and control owners with a coordinated experience.

The Work

Author and govern policy

• Proctor policy authorship across teams, guiding and overseeing policy owners who write their own policies and setting expectations for format, quality, and consistency with HUB’s standard policy format.

• Author policies directly when needed and co-author with subject matter owners across Technology, Security, Operations, Legal, HR, and Finance, translating regulatory requirements (SOX, SOC 2, ITGC) into clear, enforceable, audit-ready policy language.

• Socialize drafts with stakeholders before formal review to gather input, build understanding and buy-in, and surface objections early.

• Chase approvals by tracking every policy in flight, following up directly with reviewers and approvers, and escalating when items stall.

• Review policies for changes through periodic and event-driven reviews (regulatory updates, audit findings, incidents, organizational change), propose revisions, and maintain version control and an approval trail.

• Map policy to operational activities by connecting each policy requirement to the processes, controls, and owners that carry it out.

• Help craft implementation plans and enforcement mechanisms, including rollout steps, owners, timelines, compliance checks, accountability, and exception handling, working with control owners to make policies operational, not just approved.

Track and surface risk

• Maintain a running risk log across Technology and Operations activities.

• Work with parties to ensure translation of regulatory and audit findings into tracked risk items with clear ownership.

• Chase risk owners for status updates and flag stale, escalating, or orphaned risk items.

• Keep the risk log structured and clean enough to be handed off intact when a formal ERM function stands up.

Research and support partner teams

• Perform research in support of Legal, HR, Finance, and Technology teams, covering regulatory and framework requirements, peer and industry practice, and policy precedent.

• Translate research into concise, polished briefs that stakeholders can act on rather than raw findings.

• Connect these functions when policy or risk questions cross team boundaries, flagging where input is needed before work proceeds.

Support executive decision-making

• Prepare clear, professional decks and pre-reads for executive committee sessions involving risk or policy decisions.

• Present policy, risk, and research items to the committee when called on, framing the decision and supporting a clear outcome.

• Maintain a decision log of what was decided, by whom, and what it requires, and follow through until actions are complete.

Experience Required

• Senior-level, progressive experience in IT governance, policy development, GRC, technology risk, or compliance in a regulated environment

• Exceptional professional writing that is polished, precise, and audience-aware, from enforceable policy text to executive-ready briefs and decision records

• Strong presentation skills, with the ability to present policy, risk, and research clearly and confidently to executive committees and cross-functional leaders and to field challenge in the room

• Strong working knowledge of SOX, SOC 2, and ITGC control domains, with the ability to translate requirements into policy language that satisfies an auditor

• Demonstrated discipline in owning and maintaining a risk or issue log and chasing stakeholders to closure

• Strong research and synthesis skills, with the ability to turn regulatory, legal, or industry material into clear briefs for Legal, HR, Finance, and Technology audiences

• Executive presence and political fluency to engage stakeholders at all levels.

• Sound judgment about when to act within delegated authority and when to escalate

• Preferred: audit readiness or compliance-by-default experience, including ITSM tooling and continuous improvement pipelines

• Preferred: experience operating in a pre-formal-function environment, building scaffolding that a later, more formal team will inherit

Join Our Team

Do you believe in the power of innovation, collaboration, and transformation? Do you thrive in a supportive and client focused work environment? Are you looking for an opportunity to help build and drive change in a rapidly growing and evolving organization? When you join HUB International, you will be part of a community of learners and doers focused on our Core Values: entrepreneurship, teamwork, integrity, accountability, and service.

The expected salary range for this position is $ 120,000 to $140,000 and will be impacted by factors such as the successful candidate’s skills, experience and working location, as well as the specific position’s business line, scope and level. HUB International is proud to offer comprehensive benefit and total compensation packages which could include health/dental/vision/life/disability insurance, FSA, HAS and 401(k) accounts, paid-time-off benefits such as vacation, sick, personal, floating holidays and company holidays. In addition, eligible annual bonuses, equity and commissions may be available for some positions.

What we offer you

We invest in your growth. HUB offers structured training, licensing support, and ongoing development opportunities designed to accelerate your career. Benefits and programs vary based on employment status, role, location, and applicable eligibility requirements.

• Competitive pay with comprehensive health benefits, retirement savings matching, and company-paid life and disability plans
• Generous paid time off, paid parental leave and a wellbeing program designed to support real work/life balance
• A collaborative, high-performing culture with meaningful engagement, community impact through HUB Gives and genuine room to grow your career

The HUB difference

HUB International is one of North America’s largest insurance brokers, delivering risk management, insurance, employee benefits, retirement and wealth management solutions to businesses and individuals across the United States and Canada — through locally led teams backed by national expertise, giving you the agility of a local partner and the reach of a global organization.

Equal Employment Opportunity: HUB International Limited is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

Reasonable Accommodations: HUB International Limited is committed to providing reasonable accommodations to qualified individuals with disabilities throughout the application and hiring process. If you need a reasonable accommodation to access our career site, complete an application, or participate in any part of the hiring process, please contact the Recruiting Team at [email protected]. This contact information is for accommodation requests only and should not be used to inquire about the status of an application.

E-Verify: HUB International Limited participates in E-Verify. Please refer to Our Recruiting Process | Applicant Notices: E-Verify Program for additional information.