Manager – API Governance

Manager – API Governance

Requirements

• Bachelor’s degree in computer science or related field, or comparable experience
• 5+ years’ experience in software development.
• One or more years of people management experience.
• 5+ years of experience in API architecture, software engineering, or platform/product management within the insurance or financial services sectors.
• 3+ years in governance, enterprise architecture, or IT compliance roles in a regulated environment.
• Strong understanding of RESTful API design, JSON standards, and API security (OAuth2, mTLS).
• Familiarity with insurance data models, policy and claims systems, and industry-specific integration challenges.
• Experience leading governance efforts in mid-to-large enterprises operating under U.S. regulatory frameworks.
• Exceptional communication and influence skills across technical and non-technical audiences.

Responsibilities

• Lead the design, implementation, and evolution of enterprise API governance practices tailored to the unique needs Personal & Commercial Lines insurance industry.
• Ensure API development aligns with business strategy, compliance standards, and industry best practices, while enabling digital transformation and enhancing customer and agent experiences.
• Foster a high-quality API ecosystem supporting policy servicing, claims management, underwriting, and partner integrations.
• Develop and maintain an API governance framework aligned with core insurance functions—such as policy administration, billing, claims, and underwriting—and the company’s digital roadmap.
• Define standards and reusable patterns that ensure consistent, secure, and performant APIs supporting mobile apps, agent portals, and third-party integrations.
• Create and enforce versioning, lifecycle, and contract management policies tailored for regulated insurance workflows.
• Balance the need for innovation in customer experience with robust controls required for regulatory compliance and data privacy.
• Collaborate with product, engineering, and business teams to embed governance into development processes across policy and claims platforms.
• Champion governance adoption by tailoring education and documentation for technical and non-technical stakeholders in insurance domains.
• Operationalize API design and review workflows to accelerate delivery while maintaining consistency and oversight.
• Ensure all APIs are cataloged and discoverable in internal developer portals, particularly those enabling agent, policyholder, and claims system interactions.
• Define observability standards for APIs with a focus on operational stability during high-volume events (e.g., weather-related claim spikes).
• Monitor key performance indicators (KPIs) such as uptime, latency, error rates, and usage trends across business-critical APIs.
• Support initiatives that improve system scalability, customer experience, and cost efficiency through API Performance Management (APIPM).
• Conduct regular assessments of API quality and maturity using industry-recognized models (e.g., API-m-FAMM), tailored to the insurance value chain.
• Chair the API Governance Committee, ensuring alignment across IT, actuarial, underwriting, claims, and compliance stakeholders.
• Partner with cybersecurity, legal, and compliance teams to ensure APIs adhere to U.S.-specific regulations (e.g., GLBA, NAIC Data Security Model Law, state-level data privacy laws).
• Act as the liaison between business and technology groups for API strategy, prioritization, and best practices.
• Maintain a comprehensive view of the API portfolio, particularly integrations with core systems (e.g., Guidewire, Duck Creek, or custom policy/claims platforms).
• Ensure consistency in developer experience, documentation, and usage of shared API contracts and schemas.
• Identify and promote reuse opportunities across product lines (e.g., auto, homeowners, renters) and business capabilities (e.g., quoting, FNOL, payments).

Preferred Qualifications

• Advanced degree in related area
• Experience in one of CSAA IG’s business lines a plus
• Experience with API management platforms used in insurance (e.g., Apigee, MuleSoft, Kong).
• Understanding of U.S. regulatory requirements impacting APIs, including GLBA, state-level data laws, and insurance-specific compliance mandates.
• Familiarity with insurance-specific data exchange standards (e.g., ACORD).
• Knowledge of microservices architecture and event-driven patterns.
• Project or program management certification is a plus.