Description

Lead the design and operationalization of enterprise data governance, risk, and compliance frameworks. You will define policies, stewardship models, and decision rights while integrating governance tooling into existing data architectures. Your work ensures accountability, mitigates risk, and aligns data practices with business objectives.

Responsibilities

• Define and maintain the technology and data governance charter, including scope, RASCI decision-rights models, and stewardship structures.
• Develop and enforce data classification, minimization, and retention policies in collaboration with privacy, security, and business partners.
• Lead the selection, deployment, and integration of GRC and governance tooling (e.g., Vanta, MetricStream, MDM, DSPM, data quality, and observability platforms).
• Design and execute Data Risk Assessments (DRA/FinDRA) to prioritize datasets by business impact and inform security investment decisions.
• Manage external audits, regulatory reviews, and client-facing assessments, providing assurance and evidence for compliance activities.

Required Skills

• 8+ years of information security or data governance experience; Bachelor’s degree in Computer Science, IT, or related field (or equivalent experience).
• Deep understanding of metadata, data cataloging, lineage, Master Data Management (MDM), and data quality concepts.
• Practical experience with DSPM, DLP, IAM, and integrating governance platforms with SIEM/SOC and data architectures.
• Ability to define policy, decision rights, and centralized/federated/hybrid stewardship models.
• Proven track record leading cross-functional governance programs, including classification, access controls, and continuous improvement.
• Experience conducting risk assessments and translating technical risks into business and financial terms for executive leadership.
• Applied project management principles to drive program implementation and operational workflows.
• One or more professional cybersecurity certifications (e.g., Security+, CISA, CRISC, CISSP).

Key Skills

Education

Bachelor’s degree