Data Governance/Risk Manager – Data Risk & Third-Party Integration

Data Governance/Risk Manager – Data Risk & Third-Party - W2 only

Location: Richmond VA - Hybrid onsite

Job Description:

• Job description mutually determined by Manager and - could be equivalent to Dir/Sr Director role.
• Role Description:

• Data Risk Manager to support a large-scale business and technology integration by assessing data risk across operational and analytical data flows, third-party integrations, data mitigations, and downstream consumption The role will partner with business, technology, data, and risk stakeholders to understand evolving data architecture, identify new or changing data risks, evaluate the sufficiency of data management controls and validation activities, and support development of risk assessments and mitigation strategies.
• The ideal candidate would have:
• Strong background in data management, data risk, data governance, or technology risk.
• Experience with data migrations/conversions
• Knowledge of data governance and control concepts
• Strong analytical judgement and ability to work effectively in evolving environments
• Strong written and verbal communication skills, particularly with experience translating data concepts into risk assessments and/or executive summaries
• We are seeking an experienced Data Risk Manager to support a large-scale business and technology integration. This role will focus on assessing and managing data risk across operational and analytical data flows, third-party integrations, data migrations/conversions, and downstream data consumption.
• The Data Risk Manager will partner closely with Risk Management, Data Governance, Business, Technology, and Data Integration teams to understand evolving data architecture and identify risks associated with how data is accessed, transferred, transformed, shared, and consumed.
• A key focus of this role will be evaluating third-party data risk, particularly in environments where external vendors or service providers require access to organizational or customer data. The individual will assess whether appropriate data is being shared, ensure unnecessary or unauthorized data is restricted, evaluate existing controls, and recommend risk mitigation strategies.
• Key Responsibilities
• Assess data risks across operational and analytical data flows, including data entering, moving through, and leaving enterprise systems.
• Partner with Business, Technology, Data, Risk, and Governance stakeholders to understand data architecture, integrations, migrations, conversions, and downstream consumption pipelines.
• Identify new and changing data risks resulting from business and technology integrations, data migrations, third-party services, and evolving data architectures.
• Evaluate data access controls and risk mitigation measures to ensure users, systems, vendors, and third parties have access only to the data required for legitimate business purposes.
• Assess third-party data risk, including how external vendors receive, access, process, transfer, and consume organizational and customer data.
• Review third-party and downstream data-sharing arrangements to identify potential overexposure of data, excessive access, inappropriate data consumption, or insufficient controls.
• Evaluate the design and sufficiency of data management, data governance, access, and technology controls and identify control gaps requiring remediation.
• Perform or support independent validation of data controls and mitigation activities to determine whether identified risks have been appropriately addressed.
• Assess risks associated with data migrations and conversions, including data movement between legacy, target, third-party, and downstream systems.
• Develop and document data risk assessments, control evaluations, findings, mitigation strategies, and remediation recommendations.
• Apply strong analytical judgment to assess risk in an evolving integration environment where data architecture, processes, and controls may continue to change.
• Translate complex technical and data concepts into clear risk assessments, findings, recommendations, and executive-level summaries for business and risk stakeholders.

Note:

Pay Range: $75- $80

The specific compensation for this position will be determined by a number of factors, including the scope, complexity and location of the role as well as the cost of labor in the market; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits including medical, dental, vision and 401K contributions as well as any other PTO, sick leave, and other benefits mandated by appliable state or localities where you reside or work.