Senior Manager: Information Governance Compliance
About the role
Mayer Brown is an international law firm representing major corporations, funds, and financial institutions in complex transactions and disputes. The Information Governance department seeks a Senior Manager: Information Governance Compliance to ensure firm policies are operationalized, monitored, and enforced.
Responsibilities
Translate IG policies into clear, actionable procedures and workflows.
Define and document compliance standards, controls, and decision frameworks.
Partner with IT to align policy requirements with system capabilities.
Identify and remediate gaps between policy requirements and current-state practices.
Design and implement ongoing monitoring processes to assess adherence to IG policies.
Develop and maintain dashboards and reporting to provide visibility into compliance across systems and user groups.
Conduct periodic control testing and compliance reviews.
Identify trends, risks, and areas of non-compliance and drive remediation efforts.
Establish and maintain the governance framework for legal holds, including roles, responsibilities, and workflows.
Support audit readiness and defensibility related to legal hold processes.
Develop and manage a structured approach to reviewing and operationalizing client OCGs.
Translate client-specific requirements into enforceable policies and workflows.
Maintain visibility into client-driven restrictions and ensure alignment across IG processes.
Support the development and operationalization of the Firm’s AI governance framework.
Support the development and implementation of guidance for appropriate data use within AI tools.
Ensure alignment between access controls, data classification, and client restrictions.
Oversee execution of access reviews in partnership with IT and Information Security.
Monitor and report on access-related risks and compliance gaps.
Develop and implement a targeted, compliance-focused training program.
Measure effectiveness of training and adjust approach based on observed behaviors and risk.
Define and track key performance indicators (KPIs) for IG compliance.
Deliver concise, risk-based reporting to senior leadership.
Establish and manage processes for policy exceptions, including documentation and risk assessment.
Qualifications, Experience and Personal Attributes
Bachelor’s degree in a related field required.
8+ years of experience required in IG, Risk, Compliance, or a related field.
Relevant certifications preferred, such as IGP, CIP, CIPP, or CRISC.
Experience within a law firm, legal department, or professional services environment strongly preferred.
Demonstrated experience implementing and monitoring compliance programs.
Strong understanding of data privacy, regulatory requirements, and client confidentiality obligations.
Experience supporting audits, regulatory inquiries, or client compliance reviews.
Experience leading cross-functional initiatives and influencing stakeholders without direct reporting authority.
Experience interpreting and operationalizing client requirements or OCGs.
Experience developing or supporting AI governance frameworks, policies, or controls.
Ability to influence stakeholders across functions without direct authority, building consensus and driving accountability through collaboration.
Sound judgment and the ability to navigate ambiguity, particularly in emerging areas such as AI governance.
Strong strategic thinking, analytical, and problem-solving skills, with the ability to connect operational details to broader risk and compliance objectives.
Executive-level communication and reporting capability, including the ability to distill complex compliance topics into clear, actionable insights for senior leadership.
Ability to work under pressure and meet deadlines in an environment with shifting priorities.
Strong written and verbal communication skills, with the ability to communicate effectively and professionally across all levels of the Firm.
Strong attention to detail, organizational skills, and the ability to manage multiple priorities and workstreams simultaneously.
Ability to work under pressure and meet deadlines in an environment with shifting priorities.
Physical Requirements: May require travel to other offices as needed.