Senior Manager, Risk Management & Controls Assurance

Helping careers take flight. Reshaping an industry. Enable your career to be Made on Duck Creek.    

WHO WE ARE:   

Duck Creek Technologies is the intelligent solutions provider defining the future of the property and casualty (P&C) and general insurance industry. We are the platform upon which modern insurance systems are built, enabling the industry to capitalize on the power of the cloud to run agile, intelligent, and evergreen operations. Our modern SaaS solutions help insurers set a new standard and revolutionize how consumers interact with insurance companies.    

Authenticity, purpose, and transparency are core to Duck Creek, and we believe insurance should be there for individuals and businesses when, where, and how they need it most. Our market-leading solutions are available on a standalone basis or as a full suite, and all are available via Duck Creek OnDemand. With more than 1,000 successful implementations to date, Duck Creek removes the IT burden for insurers so they can focus on the business of insurance.   

We have a flock of more than 1,700 employees across the globe and are proud to be a Flexible-First employer. We empower our employees with the choice to work from an office, from home, or on a hybrid schedule. Our flexible-first environment fosters productivity, inclusion, collaboration, and ensures a consistent employee experience regardless of location.   

If working in a fast-paced, rapidly evolving company that is transforming one of the world’s oldest and largest industries sounds exciting, let us know. We are excited you are considering Duck Creek as a future employer and hope you decide to join “The Flock”!   

To learn more about us, visit www.duckcreek.com and follow us on our social channels for the latest information – LinkedIn and Twitter.  

TITLE: Senior Manager, Risk and Compliance Assurance

WHAT YOU’LL DO: 

The Senior Manager, Risk and Compliance Assurance at Duck Creek Technologies is a senior leadership role responsible for overseeing the organization’s Risk and Compliance Assurance function. This position ensures that the company effectively identifies, assesses, and mitigates risks while demonstrating compliance with industry standards, regulatory requirements, and customer expectations.

The Senior Manager will lead enterprise risk management initiatives, oversee internal controls, manage external audits, develop compliance reporting, and foster a security-first organizational culture through training and awareness programs. This role works cross-functionally with executives, internal departments, and external auditors to align compliance efforts with enterprise risks and business objectives while building and leading a high-performing team.

Risk Management and Controls Oversight

• Manage the Enterprise Risk Management (ERM) program to identify, assess, prioritize, and report risks to senior leadership.

• Design, implement, monitor, and remediate internal controls to mitigate organizational risks, ensuring alignment with industry standards and regulatory requirements.

• Maintain the organization’s internal controls inventory and perform regular internal control assessments to ensure ongoing adherence to frameworks such as SOC 1, SOC 2, ISO 27001, PCI DSS, DORA, and HIPAA.

• Oversee the maturation of the organization’s implementation and adherence to the NIST Cybersecurity Framework (CSF), ensuring alignment with enterprise risks and business objectives.

Audit and Compliance Management

• Manage all external audits and certifications, including SOC 1, SOC 2, ISO 27001, and PCI DSS, ensuring successful engagements and timely remediation of findings.

• Lead initiatives to respond to customer and partner security assurance requests, including RFPs, security questionnaires, and compliance attestations.

Gap Management and Remediation

• Lead efforts to track, analyze, and remediate gaps identified by management, during risk assessments, internal and external audits, and/or customer reviews.

• Collaborate with internal stakeholders to prioritize remediation activities, ensuring timely closure of findings and alignment with enterprise risk tolerance.

• Assist management with the development and tracking of corrective action plans to address identified gaps, ensuring long-term improvements to the organization’s control environment and risk posture.