Description

Lead the design and operationalization of enterprise data governance, risk, and compliance frameworks. This role is on-site.

Responsibilities

• Define and maintain the technology and data governance charter, including scope, RASCI decision-rights models, and stewardship structures.
• Develop and enforce data classification, minimization, and retention policies in collaboration with privacy, security, and business partners.
• Lead the selection, deployment, and integration of GRC and governance tooling such as Vanta, MetricStream, MDM, DSPM, and data quality platforms.
• Design and execute Data Risk Assessments (DRA/FinDRA) to prioritize datasets by business impact and inform security investment decisions.
• Manage external audits, regulatory reviews, and client-facing assessments, providing assurance and evidence for compliance activities.

Required Skills

• 8+ years of information security or data governance experience.
• Deep understanding of metadata, data cataloging, lineage, Master Data Management (MDM), and data quality concepts.
• Practical experience with DSPM, DLP, IAM, and integrating governance platforms with SIEM/SOC and data architectures.
• Ability to define policy, decision rights, and centralized/federated/hybrid stewardship models.
• Proven track record leading cross-functional governance programs, including classification, access controls, and continuous improvement.
• Experience conducting risk assessments and translating technical risks into business and financial terms for executive leadership.
• Applied project management principles to drive program implementation and operational workflows.
• One or more professional cybersecurity certifications (e.g., Security+, CISA, CRISC, CISSP).

Key Skills

Education

Bachelor’s degree