Manager, Data Governance

Paul Hastings is a leading international law firm that provides innovative legal solutions to many of the world's top financial institutions and Fortune Global 500 companies. With a strong presence throughout Asia, Europe, Latin America, and the U.S., we have the global reach and extensive capabilities to provide personalized service wherever our clients' needs take us. As one of the world's leading law firms, we seek dynamic individuals who share our commitment to service, innovation, and professional growth.

We have an opening for a Manager, Data Governance.

The Manager, Data Governance is responsible for maintaining the information and data governance model and helping ensure the integrity, confidentiality, and availability of data throughout the enterprise. The Manager, Data Governance executes information governance services, projects, and initiatives with an overall goal to decrease risks and costs associated with information governance.

Responsibilities also include the analysis and design of automated information and data governance systems and processes, business requirements definition, storage and protection of electronic data, and information governance workflow and procedure development.

The Manager, Data Governance will work with subject matter experts from Information Security, Information Technology, and other stakeholder business partners to provide strategic and implementation planning to meet information security objectives, as part of broader enterprise cloud initiatives to support efficient business operations. Experience with agile ways of working, risk management, and information governance and a must; the ideal candidate will also be intrinsically motivated, experienced with understanding resource capacity management, team building, and structured work plans.

In this capacity, the Manager, Data Governance will:

• Support the Firm's information governance model enforcing secure, efficient data transfer and operations of Firm and client data across cloud environments (IaaS, PaaS, and SaaS);
• Identify and manage data protection considerations for migrating systems to the cloud, identifying potential security risks, and determining necessary security controls;
• Collaborate closely with engineering teams, promoting the adoption/adherence to data governance best practices, consistent with the Firm's information data protection and information security policies, standards, and guidelines;
• Manage data protection strategies for secure data sharing, transfer, and storage across the organization, implementing data protection controls to satisfy data confidentiality, integrity, and availability objectives;
• Provide guidance to firm personnel at all levels on the firm's relevant policies and information governance processes;
• Assist with the development of data protection and data privacy policies and procedures;
• Assist management and attorneys in identifying and containing risks relating to data protection and data privacy;
• Assist management with responses to internal and external requests relating to data protection and data privacy;
• Oversee the client consent/notification process and ensure compliance with client guidelines related to the use of data across various form systems, including cloud platforms, external data processors, and cross-border data transfers;
• Coordinate with legal and compliance teams to ensure continuous compliance with relevant industry standards and regulations concerning cloud security and data governance, such as GDPR, CCPA, and others applicable to our operations; and
• Collaborate with various stakeholders, including Office of the General Counsel, Information Security Engineering and Operations, IT engineering, application development, and business units, to establish and enforce cloud and data governance policies within Firm technology.

• Understanding of the technology and operational risks as related to internal technology solutions;
• Awareness of additional information security standards (CSF, NIST, ISO), as well as the emerging cyber threat landscape;
• Technical understanding of security auditing and assessment practices, applications, platforms and architectures;
• Ability to develop and maintain a solid working relationship across multiple stakeholder groups; and
• Strong analytical skills;
• Strong written and verbal communication skills; and
• Advanced proficiency in Microsoft applications, (e.g., Word, Excel, PowerPoint, Teams, Visio).

Qualifications:

• Bachelor's Degree in Information Security, Cybersecurity, Information Assurance, or related field degree (required);
• 7 years' experience in a professional services environment (law firm information governance experience preferred);
• Minimum of 5 years' experience in information governance, security operations, vulnerability management, or cyber security risk management;
• Minimum of 4 years' project and program management experience;
• Demonstrated ability to deliver clear, concise, and factually accurate written and oral communications appropriate for the intended audience;
• Proficiency in Document Management Systems (DMS), with preference given to candidates with a working knowledge of iManage Work in a legal setting, including matter workspace and document security;
• Prior experience using and/or administering iManage Work, MS Purview is a plus;
• Strong understanding of information governance concepts and technologies;
• Strong knowledge of privacy and information security frameworks (e.g., NIST, ISO, etc.) and relevant regulatory requirements (e.g., GDPR, CCPA, etc.);
• CISA, CISM, GSEC, CISSP or other security-related certification preferred; and
• Strong understanding of industry control frameworks, risk management concepts, frameworks, and methodologies.

Employees will be provided with an excellent career opportunity in a collaborative environment, in addition to a generous total compensation package with the opportunity to earn bonuses based on individual contribution and firm profitability.

The salary wage range that we expect to pay for this position is a minimum of $122,700 and a maximum of $159,500 annually. The actual pay wage may vary based on experience or other relevant factors.

Eligible employees can participate in the Firm's comprehensive benefits program, which include the following:

• Medical, Dental, Vision, Life/AD&D, Long Term Care, and Short and Long Term Disability
• Flexible Spending Account and Health Savings Account
• Healthcare Concierge and Advocacy
• Voluntary 401k Plan and Profit Sharing
• 10 Paid Holidays per year and a generous PTO program
• Family Support including Pediatric Mental Health and Parental Support, Paid Parental Leave, Fertility Benefits, and Breast Milk Shipping
• Back-up Child Care, Elder Care, and Tutoring
• Wellness Programs (Employee Assistance Program, Mental Health, and Well-Being Events)
• Retirement Plan Consulting
• Anniversary Bonus Program
• Professional Development Programs
• Transportation Allowance and Commuter Benefits
• International Travel Insurance
• Auto/Home/Legal Insurance
• Pet Insurance
• Employee discounts
• And more

The Firm has a range of diversity initiatives including our Paul Hastings Affinity Networks (PHANs), Women's Initiative, and PH Balanced. These initiatives provide a firmwide forum to share experiences, as well as an opportunity to participate in a supportive network with common interests to help make life at the firm more inclusive. Learn more about our Global Diversity, Inclusion and Wellness Initiatives here.

Paul Hastings LLP is an equal employment and affirmative action employer F/M/Disability/Vet/Sexual Orientation/Gender Identity. Pursuant to local ordinances, we will consider qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Chance Initiative for Hiring Ordinance.