Director, Enterprise Data Governance & Controls

quadreal; Toronto; On-site; CAD 180,000 - 240,000; Full time

Job summary

QuadReal Property Group seeks a Director, Enterprise Data Governance & Controls to lead two intertwined disciplines—Business Controls and Enterprise Data Governance—within Risk & Integrated Assurance. The role reports to the VP and drives an enterprise operating model.

It is a build-phase position focusing on verifiable controls and trusted data, anchored in COSO 2013 and DAMA-DMBOK, with a pilot in the Real Estate Debt Program and scale across the organization.

Qualifications

• COSO 2013 framework knowledge required.
• DAMA-DMBOK data governance knowledge.
• Data governance and data quality experience preferred.

Responsibilities

• Run QuadReal's Business Controls framework day to day across COSO 2013 components and principles.
• Define enterprise data definitions, classifications, and Critical Data Elements (CDEs) per DAMA-DMBOK; establish ownership and governance.
• Integrate controls and governance into system design with ED&A/Technology and Data Platform teams to ensure built-in governance.

Skills

COSO 2013

DAMA-DMBOK

Power BI

Purview

dbt

Microsoft Fabric

Airflow

Entra ID

Data governance

Data quality

Tools

Power BI

Purview

dbt

Microsoft Fabric

Airflow

Entra ID

Job description

About QuadReal Property Group

QuadReal Property Group is a global real estate investment, development and operating company headquartered in Vancouver, British Columbia. Its assets under management are $98.5 billion. From its foundation in Canada as a full-service real estate operating company, QuadReal has expanded its capabilities globally for investments in equity and debt in both the public and private markets. QuadReal invests directly through operating platforms in which it holds an ownership interest and via programmatic partnerships.

QuadReal seeks to deliver strong investment returns while creating sustainable environments that bring value to the people and communities it serves. Now and for generations to come.

QuadReal: Excellence lives here.

www.quadreal.com

Role Description:

The Director, Enterprise Data Governance & Controls is accountable for two disciplines within QuadReal's Risk & Integrated Assurance function: Business Controls and Enterprise Data Governance. The role reports to the VP, Risk & Integrated Assurance and turns the VP's enterprise-wide mandate into one accountable operating model.

The Director holds two mandates that work together as one. The first is running and maturing the Business Controls framework, anchored in COSO 2013, and extending it beyond ICFR into data controls, operational controls, and controls for AI and automation. The second is defining and governing the enterprise data those controls rely on, anchored in DAMA-DMBOK, covering data definitions, ownership, quality, and observability. Together they make QuadReal's controls provable rather than assumed, and its data reliable enough to control.

This is a build-phase role, not a steady-state one. It is measured by what ships and holds up under audit, not by frameworks authored, and by the difference between evidencing a control (retained, re-testable proof that it operated) and merely demonstrating that a job ran. The operating principle is simple: govern only what you deliver, and deliver only what you can stand behind.

The first priority is proving the combined operating model through a focused pilot within the Real Estate Debt Program. Priorities that follow include scaling to more operating companies, AI governance, and expanded data coverage. The Director also supports the VP's overall view of QuadReal's risk and control environment and represents Business Controls and Data Governance in Risk & Integrated Assurance reporting.

Responsibilities:

1. Business Controls
   Run QuadReal's Business Controls framework day to day, anchored in COSO 2013 across all five components and 17 principles.
   Support the ICFR program end to end: annual scoping, risk assessment, control design, testing, remediation, and certification.
   Coordinate SOC 1 / ISAE 3402 fieldwork and evidence collection, work directly with external auditors (EY), and drive remediation before reporting to the VP and BCI.
   Extend COSO coverage beyond ICFR into operational controls, and set controls standards for AI and automation, at a pace the business can absorb.
   Build out the Controls Oversight Framework across data integrity controls, and IT general controls (ITGCs) and own error reporting, escalation, and remediation so leadership always has clear visibility.
2. Enterprise Data Governance
   Define QuadReal's enterprise data definitions, classifications, and Critical Data Elements (CDEs), anchored in DAMA-DMBOK.
   Own the data ownership and accountability model: name Data Owners, Stewards, and Custodians, and hold them accountable through a defined sign-off cadence.
   Deliver the enterprise business glossary in Microsoft Purview under a tiered governance model, and maintain metadata management, lineage standards, and dbt metadata synchronization across the platform.
   Set data quality thresholds and Trusted Layer certification criteria, and hold data observability (freshness, pipeline health, trust scores) to the same standard as financial controls.
   Align controls as gates across the data delivery lifecycle (ingestion, definition, build, use, and govern), so a control fires wherever data advances and nothing reaches a certified output without passing.
   Build data governance capability across the business through training and playbooks, rather than keeping expertise centralized.
3. Integration and Decision Authority
   Act as the link between Business Controls and Data Governance called for in the integrated operating model: define control standards and evidence expectations alongside data definitions, and build controls into new systems and initiatives from the start.
   Make the final call when control standards and data definitions conflict, including which system is the authoritative source when two systems disagree.
   Work with ED&A / Technology and the Data Platform team so controls and governance are built into the toolchain (Microsoft Fabric, dbt, Airflow, Power BI, Purview, Entra ID, Quadrant) by design, not added after go-live.
   Manage vendors on a fixed-pr