Data Governance & Management Lead
Data Governance & Management
Location: Hybrid (London 3 days per week)
Salary: £95,000 - £115,000 + benefits
Requirements
- Advanced degree in Information Management, Data Science, Law, Risk Management, or related field (or equivalent experience).
- 7-10 years’ experience in data governance, data protection, or information risk, preferably within the fintech or financial services sectors.
- Working knowledge of data governance/protection regulations (e.g., GDPR, CCPA, UK)
- Data Protection Act, BCBS 239
- Experience with data classification, lifecycle management, and secure data sharing best practices.
- Excellent analytical, problem-solving, and communication skills.
- Recognized professional certifications (e.g., CISSP, CISM, CIPP/E, CDMP, CIPT, ISO 27001, or similar) are highly valued.
Key Responsibilities
- Data Classification & Protection: Oversee and challenge the identification, classification, and management of sensitive and critical data across the business, ensure appropriate controls are in place and consistently applied.
- Data Retention & Compliance: Assess and monitor data retention and deletion practices to ensure compliance with global regulations such as GDPR, CCPA, and the UK Data Protection Act.
- Secure Data Sharing: Review and evaluate practices for secure data exchange internally and with third parties, ensure data transfer controls meet industry best practices and adhere to legal and regulatory standards.
- Reporting & Analytics Governance: Oversee governance of reporting and analytics processes to preserve data integrity, privacy and accuracy, partnering with business and technology teams.
- Policy Review & Development: Develop, review, and enhance data governance, classification, and privacy policies, advise on industry best practices and emerging regulatory requirements.
- Risk & Control Assessment: Conduct risk assessments and deep dives on data-related processes, provide independent challenge and recommendations to 1st line functions.
- Training & Awareness: Contribute to staff training and awareness initiatives on data privacy, classification, and safe handling.