Lead, Data Governance
Remote
Job Summary
Build and maintain data governance policies, classification standards, and ownership models aligned with security and privacy requirements. Own access governance for the lakehouse and analytics stack, including entitlement standards, periodic reviews, and least-privilege controls across Trino, Ranger, Cube, and Metabase. Work with Data Engineering on technical implementations like schema restrictions and service account management while setting quality standards for tracking and improvement. Keep metadata, lineage, and inventory current for compliance and audit evidence, including SOC 2, ISO 27001, and CSA STAR. Review vendors and new analytics or AI use cases with Security, Privacy, and Legal, and support cross-border data requests and regional flows. Track risks and control gaps within the Enterprise Risk Management program as the go-to partner for governance questions.
Required Qualifications
- 5+ years in data governance, data security, GRC, privacy engineering, or a related field
- At least 2 years working with modern data platforms (lakehouse/warehouse, SQL engines, BI, semantic layers)
- Solid grasp of data governance frameworks (DAMA-DMBOK, NIST, or similar) and how to apply them in a company that moves quickly
- You've built or run data classification, access control, or entitlement review programs, not just written the policies
- Familiar with cloud data platforms (GCP a plus) and typical analytics tooling
- Working knowledge of privacy and regulatory requirements in financial services (GDPR, CCPA, cross-border transfers, and similar)
- Experience supporting SOC 2, ISO 27001, or similar audits
- You work well with engineering teams and know how to push for good controls without becoming a bottleneck
- Strong written and verbal communication skills
- Organized, detail-oriented, and comfortable in a fast-paced remote environment
- Comfortable as an IC with no direct reports
Desired Qualifications
- Fintech, brokerage, or regulated financial services background
- Hands-on experience with Trino, Apache Ranger, dbt, Cube, Metabase, Airflow, or Iceberg
- Experience reviewing AI/ML and analytics tools
- Privacy program or vendor/DPA review experience
- CIPT, CIPM, CISM, CISSP, CDMP, CRISC, or similar certifications
- You've been the first governance hire at a growing company before
- Experience with Japan or EU data residency and cross-border data issues
- Exposure to ERM or operational risk
- Remote or distributed team experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.