Data Governance Manager
Compliance Department

Summary:
A key member of the Data Privacy Team and integral to the Information Governance work, this role will support the development, implementation, and compliance of the information governance and privacy program.

Duties and Responsibilities:

• Participate in the development and upkeep of firmwide information governance and privacy programs as driven by firm, industry, legal, and regulatory requirements.
• Collaborate with cross-functional teams, confirm and formalize data stewardship practices, and drive a culture of understanding and compliance across the firm.
• Advise on the handling of, and controls relating to, CUI in accordance with regulatory requirements and NIST 800-171.
• Identify and monitor compliance activities relating to all aspects of the information lifecycle.
• Collaborate with cross-functional departments on the choice and implementation of technologies in support of the program objectives.
• Ensure information governance activities are consistent with legal and regulatory requirements.
• Report on status, actions, and compliance.
• Uphold high standards of confidentiality, discretion, and integrity, particularly with respect to all sensitive and/or confidential firm and client information to which this position will have access.
• Perform other duties as deemed necessary and assigned by the DPO or Firm Management.

Qualifications:

• At least 5 years of proven experience in the development and implementation of a comprehensive information governance program.
• Experience working at this level previously.
• Working familiarity with controls relevant to NIST 800-171.
• Ability to collaborate with cross-functional teams and influence stakeholders.
• Familiarity with data governance tools and technologies.
• Strong stakeholder management.
• Experience managing projects.
• Experience working with the OneTrust platform is advantageous.

Skills and Education:

• Bachelor’s Degree required; Master’s in an information management discipline preferred.
• Data privacy qualification desirable, e.g., CIPP/US.
• Robust understanding of US laws and regulations as they relate to data, including CUI, HIPAA, HITECH, ITAR, and CCPA.
• Good understanding of GDPR.
• Familiarity with PIPA, PIPL, and POPIA is advantageous.