Cloud Data Governance Manager

Candidates must be based in one of the following cities:

• New York City
• Boston
• Washington, D.C.
• Los Angeles
• Chicago
• Houston
• Atlanta

Applicants outside these locations will not be considered at this time.

The Cloud Governance Manager plays an essential role in overseeing the firm's data management practices, ensuring that data across the firm's solutions is available, and secure. This position involves developing and implementing data standards and policies that support the organization's objectives, while also facilitating effective data sharing and protection. By coordinating with various departments, the Cloud Governance Manager ensures that data protection practices align with regulatory requirements and business strategies, ultimately enhancing the security processes and operational efficiency of the firm's data.

Roles and Responsibilities:

Develop and implement a data governance framework:
As a Cloud Governance Manager, you will be responsible for creating and implementing a data governance framework that outlines the policies, procedures, and standards for managing the organization's data assets from intake to disposal, using data governance tools such as of Microsoft Purview Information Protection, Data Lifecycle Management and Data Loss Prevention, iManager Threat manager, Varonis etc..

Designing the implementation of
data retention policies and supporting technical controls:
You will review the supporting policies and procedures regarding data retention that define how long data should be kept and how it should be disposed of and designing the implementation of technical controls to enforce the relevant policies and procedures.

Designing the implementation of
data classification policies and supporting technical controls:
You will review the supporting policies and procedures regarding data classification that define how data should be classified based on its sensitivity, criticality, and regulatory requirements and designing the implementation of technical controls to enforce the relevant policies and procedures.

Review data security and privacy controls:
You will be responsible for review data security and privacy controls on relevant solutions to ensure that the data governance technologies, policies and procedures protect the firms data from unauthorized access, use, or disclosure.

Provide training on data governance best practices:
You will provide training on data governance best practices to ensure that employees understand their roles and responsibilities in managing data.

Furthermore, the Cloud Governance Manager will be responsible for:

1. Working with various business stakeholders to understand their data access and sharing requirements and influence the design of secure and compliant solutions.
2. Partnering with Information Governance Team to ensure the directives of the Office of the General Counsel are executed.
3. Designing the implementation of Microsoft Purview Information Protection, Data Lifecycle Management and Data Loss Prevention.
4. Designing reporting and alerting capabilities in different solutions to support a robust data governance function.
5. Providing data governance thought leadership for the O365 implementation and other cloud platforms.
6. Working with Security Architecture team to develop data governance impactful secure design patterns.
7. Working with the Governance Risk and Compliance team to ensure that newly identified risks are properly entered into the risk register as needed and assist the GRC team with updates on technical risk mitigation plans.

In addition, the Cloud Governance Manager will be expected to have:

• Strong project management skills and understanding of the technology and operational risks as related to technology solutions;
• Ability to develop and maintain a solid working relationships across the departments;
• High-level technical understanding of security applications, platforms and architectures;
• Advanced awareness of current information security standards and developments (CSF, NIST, ISO), as well as the emerging cyber threat landscape;
• Strong understanding of Cloud and data governance from a technology perspective;
• Excellent analytical and problem-solving skills, inquisitive nature and comfort challenging current practices;
• Understanding of governance, risk and compliance (GRC) practices and technologies across governance, process and technical domains.

Qualifications:

• Bachelor degree in Information Security, Information Assurance, Computer Science, Information Systems preferred;
• At least 7 years of combined information technology, information security and risk management experience;
• CISA, CISM, GSEC, CISSP, CRISC or other security-related certification preferred;
• Advanced understanding of Microsoft Purview and other data governance tools and methodologies;
• Strong understanding of risk management concepts, frameworks, and methodologies;
• Strong understanding of information security concepts and technologies;
• Fundamental knowledge of the operation of law practices; and
• Advanced knowledge of MS Outlook, Word, Excel, Visio, and PowerPoint.