Data Governance & Controls Manager

Key Responsibilities

• Lead identification, assessment, and mitigation of technology, cyber, data, and privacy risks, including cloud, AI/ML, and third-party exposures
• Design and implement enterprise-level information risk and control frameworks within a second line environment
• Develop and monitor Key Risk Indicators (KRIs) to evaluate control effectiveness across technology and data domains
• Partner closely with first line technology, data, and business teams to provide independent oversight, challenge, and guidance
• Collaborate with Internal Audit, Compliance, and Risk to enhance the overall control environment
• Establish and maintain governance structures, policies, and reporting aligned with regulatory expectations
• Deliver data-driven insights and risk reporting to senior leadership and stakeholders
• Drive risk awareness initiatives and foster a strong risk culture across the organization
• Lead and mentor team members within a global, matrixed risk organization

Requirements

• 7–10 years of experience in risk management within financial services or consulting, with exposure to multiple lines of defense
• Strong expertise in information risk domains including cybersecurity, data governance, privacy, and technology risk
• Proven experience building and implementing risk frameworks (e.g., NIST, ISO, COBIT, cloud/security standards)
• Familiarity with cloud platforms (AWS, Azure, GCP) and emerging technologies (AI/ML)
• Strong analytical and problem-solving capabilities, with the ability to influence stakeholders
• Experience operating in a second line (or interacting closely with it) preferred
• Relevant certifications such as CISSP, CISM, CRISC, CISA, or CIPP highly desirable
• Prior experience in asset management or broader financial services strongly preferred