$120,000 - $140,000 / year
LI-Hybrid
The insurance industry runs on Vertafore. We equip agencies, MGAs, and carriers with the core digital systems, specialized AI, and data-driven foundation to eliminate distribution drag across the insurance lifecycle, spanning sales, servicing, and back-office operations.
Underpinned by unmatched speed and performance power, we are the trusted backbone that's taking the insurance industry from friction to flow with Distribution Velocity - speed, performance, and trust - to drive growth at scale.
With over 95% of the top agencies and insurers and 50% of industry compliance transactions running through Vertafore, we lead at the intersection of innovation and trust, giving insurance professionals the confidence to transform and win in the AI era.
Our reach is global, with headquarters in Denver, Colorado, and offices across the U.S., Canada, and India.
Core Duties and Responsibilities:
The Manager, Compliance Operations & Assurance manages the operational execution of Vertafore's audit, certification, customer assurance, and vendor assessment activities. The role coordinates internal and external stakeholders, maintains audit-ready evidence and assessment records, monitors deadlines and corrective actions, and improves processes to support efficient, consistent delivery.
This is a hands-on operational management position, focused on execution, documentation, workflow management, and accountability.
Audit & Certification Management
Manage and coordinate internal and external audit activities, including SOC 1, SOC 2, SOX, GovRAMP, corporate assessments, and other applicable assurance programs.
Maintain audit calendars, milestones, evidence requests, owners, and submission deadlines; serve as an operational liaison with auditors and assessment teams.
Coordinate evidence collection, quality checks, organization, and submission; maintain centralized, audit-ready documentation and reusable evidence repositories.
Track findings, corrective action plans, and remediation deadlines with accountable owners; escalate overdue items and document closure.
Streamline recurring audit activities and reduce duplicative requests.
Customer Assurance & Compliance Assessments
Manage customer security and compliance questionnaires, customer audit requests, due diligence inquiries, and supporting documentation.
Coordinate timely, consistent responses with Sales, Customer Success, Cybersecurity, Legal, and other subject-matter experts.
Maintain approved response libraries, certifications, attestations, audit reports, and reusable evidence packages.
Implement response standards, intake and prioritization workflows, and self-service or automation opportunities.
Monitor assessment volumes, turnaround times, service levels, and backlog.
Vendor Assessments & Third-Party Compliance Operations
Coordinate initial vendor due diligence, periodic reassessments, and vendor compliance documentation for onboarding and renewal.
Manage vendor assessment intake, questionnaires, documentation requests, and assignments in OneTrust or other approved platforms.
Maintain current assessment records, SOC reports, certifications, supporting evidence, status, and reassessment schedules.
Route vendor responses and identified concerns to Cybersecurity, Legal, Procurement, and appropriate decision-makers for substantive evaluation.
Track outstanding documentation, follow-up actions, overdue assessments, and completion against established procedures and deadlines.
Standardize templates, improve workflows, and report on assessment volume, cycle time, completion rates, and backlog.
Compliance Operations & Process Improvement
Run recurring compliance operations and maintain documented procedures, checklists, workflows, and evidence management practices.
Administer compliance workflow tools, repositories, and tracking systems; ensure accurate records and clear ownership of deliverables.
Identify bottlenecks, automate repetitive activities, and improve consistency, efficiency, and operational scalability.
Cross-Functional Coordination, Reporting & Team Management
Coordinate priorities and deliverables across Cybersecurity, Technology Operations, Finance, Legal, Procurement, Sales, and business teams.
Prepare dashboards and management reports on audit milestones, customer and vendor assessment activity, evidence readiness, and open actions.
Oversee assigned compliance operations personnel, establish service standards, assign work, coach team members, and monitor capacity.
Escalate missed deadlines, unresolved dependencies, and resource constraints through established channels.
Knowledge, Skills and Abilities:
Strong project management, documentation, communication, stakeholder coordination, and deadline-management skills.
Proficiency with Microsoft Office, SharePoint, and workflow or project management systems.
Qualifications:
Required
Bachelor's degree in Business, Information Systems, Accounting, Compliance, or related field, or equivalent experience.
5-8 years of experience in compliance operations, audit coordination, customer assurance, vendor assessments, or related functions.
Experience coordinating SOC 1, SOC 2, SOX, or comparable audits and handling customer questionnaires or due diligence requests.
Preferred
Experience in SaaS, enterprise software, InsurTech, or another technology environment.
Familiarity with GovRAMP, ISO 27001, NIST, and vendor assurance materials, including SOC 2 reports.
Experience with OneTrust, questionnaire automation, customer trust centers, or evidence management platforms.
Experience supervising or mentoring analysts; relevant audit or assurance certification (e.g., CISA or ISO 27001 Lead Auditor).
Additional Requirements and Details:
· Travel required up to 10% of the time.
· Located and working from an office location on a hybrid model.
· Occasional lifting and/or moving up to 10 pounds.
· Frequent repetitive hand and arm movements required to operate a computer.
· Specific vision abilities required by this job include close vision (working on a computer, etc.).
· Frequent sitting and/or standing.
Is this role not an exact fit for you? Keep an eye on our Careers Page for other positions!
Vertafore is a drug free workplace and conducts preemployment drug and background screenings.
The selected candidate must be legally authorized to work in the United States.
The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all the job responsibilities, duties, skill, or working conditions. In addition, this document does not create an employment contract, implied or otherwise, other than an "at will" relationship.
Vertafore strongly supports equal employment opportunity for all applicants regardless of race, color, religion, sex, gender identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, sexual orientation, genetic information, or any other characteristic protected by state or federal law.
We do not accept resumes from agencies, headhunters, or other suppliers who have not signed a formal agreement with us.
