TRU is representing a leading top law firm that is seeking a Data Governance Manager to join its team in a remote capacity near Washington, D.C. This role will be instrumental in supporting the development, implementation, and compliance of the information governance and privacy program. Responsibilities include participating in the development of firm-wide information governance programs, collaborating with cross-functional teams to drive compliance, advising on CUI handling, monitoring compliance activities, and more. The ideal candidate will have experience building a privacy program, information governance, familiarity with NIST 800-171 controls, and the ability to collaborate with stakeholders. A Bachelor's degree is required, along with knowledge of U.S. laws and regulations, such as CUI, HIPAA, HITECH, and GDPR, which is essential. Candidates with a CIPP/US certification will move to the front of the line. The Data Governance Manager will play a crucial role in upholding confidentiality and integrity within the firm.
Summary:
A key member of the Data Privacy Team and integral to the Information Governance work, this role will support the development, implementation and compliance of the information governance and privacy program.
Duties and Responsibilities:
- Participate in the development and upkeep of firm-wide information governance and privacy programs as driven by firm, industry, legal and regulatory requirements.
- Collaborate with cross-functional teams, confirming and formalizing data stewardship practices, driving a culture of understanding and compliance across the firm.
- Advise on the handling of and controls relating to CUI in accordance with regulatory requirements and NIST 800-171.
- Identify, and monitor compliance activities relating to all aspects of the information lifecycle.
- Collaborate with cross-functional departments on the choice and implementation of technologies in support of the program objectives.
- Ensure information governance activities are consistent with legal and regulatory requirements.
- Reporting on status, actions, and compliance.
- Uphold high standards of confidentiality, discretion, and integrity, particularly with respect to all sensitive and/or confidential firm and client information to which this position will have access.
- Experience in the development and implementation of a comprehensive information governance program.
- Experience working at this level previously
- Working familiarity with controls relevant to NIST 800-171
- Ability to collaborate with cross-functional teams and influence stakeholders
- Familiar with data governance tools and technologies
- Good stakeholder management
- Experience managing projects
- Experience working with the OneTrust platform is advantageous
- Bachelor's Degree required. Masters in an information management discipline preferred.
- Data privacy qualification desirable, e.g. CIPP/US.
- Robust understanding of U.S. laws and regulations as they relate to data – CUI, HIPAA, HITECH, ITAR, CCPA.
- Good understanding of GDPR
- Understanding of PIPA, PIPL, and POPIA is advantageous
- As with all positions, the Data Governance Manager will be required to perform other duties as deemed necessary and assigned by the DPO or Firm Management.