Technology Governance Policy Lead

About Us

At HUB International, we are a team of entrepreneurs. We believe in protecting and supporting the aspirations of individuals, families, and businesses. We help our clients evaluate their risks and develop solutions tailored to their needs. We believe in empowering our employees to learn, grow, and make a difference. Our structure enables our teams to maintain their own unique, regional culture while leveraging support and resources from our corporate centers of excellence.

HUB is a global insurance and employee benefits broker, providing a boundaryless array of business insurance, employee benefits, risk services, personal insurance, retirement, and private wealth management products and services. With over $5 billion in revenue and almost 20,000 employees in 600 offices throughout North America, HUB has grown substantially, in part due to our industry leading success in mergers and acquisitions

Position Summary

The Technology Governance team’s Policy Lead develops and operates the policy and risk tracking capability within HUB’s Technology Governance function. The role ensures technology policies are well written, approved, adopted, and enforced, and that technology risks stay visible and owned.

The Policy Lead acts as an extension of Technology Governance leadership when engaging stakeholders, carrying governance priorities into working sessions and executive discussions and exercising judgment on what is negotiable and what must be escalated. The role is ERM-adjacent, not ERM: it maintains a focused risk log but does not own risk appetite, quantitative risk modeling, or enterprise risk methodology.

The Policy Lead partners across Technology, Security, Operations, Legal, HR, and Finance to provide policy owners and control owners with a coordinated experience.

The Work

Author and govern policy

• Proctor policy authorship across teams, guiding and overseeing policy owners who write their own policies and setting expectations for format, quality, and consistency with HUB’s standard policy format.
• Author policies directly when needed and co-author with subject matter owners across Technology, Security, Operations, Legal, HR, and Finance, translating regulatory requirements (SOX, SOC 2, ITGC) into clear, enforceable, audit-ready policy language.
• Socialize drafts with stakeholders before formal review to gather input, build understanding and buy-in, and surface objections early.
• Chase approvals by tracking every policy in flight, following up directly with reviewers and approvers, and escalating when items stall.
• Review policies for changes through periodic and event-driven reviews (regulatory updates, audit findings, incidents, organizational change), propose revisions, and maintain version control and an approval trail.
• Map policy to operational activities by connecting each policy requirement to the processes, controls, and owners that carry it out.
• Help craft implementation plans and enforcement mechanisms, including rollout steps, owners, timelines, compliance checks, accountability, and exception handling, working with control owners to make policies operational, not just approved.

Track and surface risk

• Maintain a running risk log across Technology and Operations activities.
• Work with parties to ensure translation of regulatory and audit findings into tracked risk items with clear ownership.
• Chase risk owners for status updates and flag stale, escalating, or orphaned risk items.
• Keep the risk log structured and clean enough to be handed off intact when a formal ERM function stands up.

Research and support partner teams

• Perform research in support of Legal, HR, Finance, and Technology teams, covering regulatory and framework requirements, peer and industry practice, and policy precedent.
• Translate research into concise, polished briefs that stakeholders can act on rather than raw findings.
• Connect these functions when policy or risk questions cross team boundaries, flagging where input is needed before work proceeds.

Support executive decision-making

• Prepare clear, professional decks and pre-reads for executive committee sessions involving risk or policy decisions.
• Present policy, risk, and research items to the committee when called on, framing the decision and supporting a clear outcome.
• Maintain a decision log of what was decided, by whom, and what it requires, and follow through until actions are complete.

Experience Required

• Senior-level, progressive experience in IT governance, policy development, GRC, technology risk, or compliance in a regulated environment
• Exceptional professional writing that is polished, precise, and audience-aware, from enforceable policy text to executive-ready briefs and decision records
• Strong presentation skills, with the ability to present policy, risk, and research clearly and confidently to executive committees and cross-functional leaders and to field challenge in the room
• Strong working knowledge of SOX, SOC 2, and ITGC control domains, with the ability to translate requirements into policy language that satisfies an auditor
• Demonstrated discipline in owning and maintaining a risk or issue log and chasing stakeholders to closure
• Strong research and synthesis skills, with the ability to turn regulatory, legal, or industry material into clear briefs for Legal, HR, Finance, and Technology audiences
• Executive presence and political fluency to engage stakeholders at all levels.
• Sound judgment about when to act within delegated authority and when to escalate
• Preferred: audit readiness or compliance-by-default experience, including ITSM tooling and continuous improvement pipelines
• Preferred: experience operating in a pre-formal-function environment, building scaffolding that a later, more formal team will inherit

Join Our Team

Do you believe in the power of innovation, collaboration, and transformation? Do you thrive in a supportive and client focused work environment? Are you looking for an opportunity to help build and drive change in a rapidly growing and evolving organization? When you join HUB International , you will be part of a community of learners and doers focused on our Core Values: entrepreneurship, teamwork, integrity, accountability, and service.

The expected salary range for this position is $ 120,000 to $140,000 and will be impacted by factors such as the successful candidate’s skills, experience and working location, as well as the specific position’s business line, scope and level. HUB International is proud to offer comprehensive benefit and total compensation packages which could include health/dental/vision/life/disability insurance, FSA, HAS and 401(k) accounts, paid-time-off benefits such as vacation, sick, personal, floating holidays and company holidays. In addition, eligible annual bonuses, equity and commissions may be available for some positions.