Documentation Lifecycle Management

• Serve as the authoritative gatekeeper for document publication so that no governance artifact advances to published status without meeting framework standards for structure, tier-appropriate content, metadata completeness, and approval chain compliance
• Pursue and collect documentation across TechOps service domains, knowing what is owed, when it is owed, and follow up when it is missing without waiting to be asked
• Maintain the Policy Statements List as a peer governance object, tracking changes, approvals, and linkage to supporting documents, and ensuring the approval gate prevents documents from advancing until all linked Policy Statements are approved
• Coordinate with the Governance Documentation Specialist on document production as the Framework Manager sets the standard and owns the architecture; the Specialist produces content within it

Regulatory Traceability & Mapping

• Synchronized with Legal and GRC teams’ identification and interpretation of regulatory requirements, maintain documented linkages between regulatory obligations — ITGC, NYDFS 23 NYCRR 500, SOC 2 — and the controls that address them across TechOps service domains
• Identify mapping gaps: controls without regulatory anchors, regulations without corresponding controls, and policy statements without operational standards beneath them
• Keep the mapping current as the regulatory environment, the control framework, and TechOps domains evolve
• Produce traceability documentation that satisfies auditor requests without requiring preparation — the linkages are maintained continuously, not assembled on demand

Capabilities Required

Framework architecture and governance literacy

• Has built or significantly contributed to a governance documentation framework in a regulated environment, not just operated inside one someone else designed
• Understands the full documentation tier structure and the content boundaries between tiers, including corporate policy, corporate standards, operational policy, operational standards, SOPs, control documents, monitoring reports, control evidence reports, and domain records
• Deep working knowledge of ITGC control requirements and what operationalized, audit-ready controls look like in practice
• Familiar with ITIL, COSO, COBIT, or equivalent frameworks as design tools, applying them to build something real, not to cite them in presentations
• Understands what external auditors examine and what makes a control environment defensible, with enough audit exposure to design for scrutiny, not just for internal consumption

Platform Expertise

• SharePoint document library architecture, including content types, column schemas, metadata taxonomy, permissions model, and search configuration designed for governance use rather than general file storage
• Power Automate workflow design, including approval chains, lifecycle automation, notification triggers, and gate logic that enforces governance standards without requiring manual intervention
• Version control configuration and discipline, including major/minor versioning, retention policies, and audit trail management that produces a defensible document history
• Optro or equivalent GRC platform administration, including control registry configuration, evidence capture workflow, deficiency tracking, and audit status management, with proficiency at hire or within 90 days
• Cross-platform source of truth architecture: understands how SharePoint, Optro, Workiva, and Seismic each serve a different layer of the governance ecosystem and maintains the boundaries and linkages between them

Analytical & Systems Thinking

• Sees how things connect across regulation, policy, standard, control, and reporting, and identifies breaks in the chain that others miss
• Maintains accuracy and coherence across a complex, multi-domain, multi-platform documentation environment without losing track of the whole
• Reads a document and identifies tier boundary violations, missing linkages, and structural inconsistencies without being prompted
• Tracks gaps, overdue items, and lifecycle events across the full framework and builds the systems that make that tracking sustainable over time

Collaboration & Influence

• Diplomatically persistent: holds the framework standard under pressure from domain teams and senior stakeholders without becoming an obstacle
• Builds credibility through expertise and follow-through. The authority to hold the line comes from knowing the material better than anyone else in the room
• Works closely with the Governance Documentation Specialist, the Process and Controls Advisor, and Domain Leads. The framework succeeds through partnership, not position
• Hands-on practitioner who does the work at full quality and owns outcomes directly

Background

The right candidate has built governance documentation frameworks in regulated environments and has the experience to prove it. They have seen frameworks fail in production, watched audit findings land on gaps they designed around, and built something better because of it. Financial services or insurance backgrounds are strongly preferred; the regulatory context is specific and the learning curve matters.

Proficiency with Optro or an equivalent GRC platform is required, at hire or demonstrated within 90 days. SharePoint library architecture experience is required at hire. Familiarity with Power Automate, Workiva, and Seismic is a meaningful differentiator. What matters most is a track record of building governance infrastructure that held up when auditors examined it, and a disposition toward doing the work rather than directing others to do it.

Backgrounds that define this candidate include:

• Platform administration experience in SharePoint governance library design, GRC platform configuration, or equivalent, with hands-on ownership of the architecture rather than user-level familiarity
• GRC framework design and administration in a financial services or insurance environment, with direct accountability for ITGC control documentation, mapping, and audit readiness
• Familiarity with internal audit activities and what auditors look for when assessing control environments, with enough exposure to design frameworks that hold up under examination

JOIN OUR TEAM

Do you believe in the power of innovation, collaboration, and transformation? Do you thrive in a supportive and client focused work environment? Are you looking for an opportunity to help build and drive change in a rapidly growing and evolving organization? When you join HUB International, you will be part of a community of learners and doers focused on our Core Values: entrepreneurship, teamwork, integrity, accountability, and service.

The expected salary range for this position is $ 130,000 to $150,000 and will be impacted by factors such as the successful candidate’s skills, experience and working location, as well as the specific position’s business line, scope and level. HUB International is proud to offer comprehensive benefit and total compensation packages which could include health/dental/vision/life/disability insurance, FSA, HAS and 401(k) accounts, paid-time-off benefits such as vacation, sick, personal, floating holidays and company holidays. In addition, eligible annual bonuses, equity and commissions may be available for some positions.