Data Governance & Controls Manager

Selby Jennings; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Selby Jennings is expanding its Enterprise Risk Management function and seeks a Data Governance & Controls Manager to advance the firm’s second line of defense capabilities across technology, data, and operating models.

The role focuses on technology, cybersecurity, data governance, and privacy risk, collaborating with senior leadership to strengthen risk oversight and governance structures.

Qualifications

• 7–10 years of risk management experience in financial services or consulting.
• Expertise across information risk domains: cyber, data governance, privacy, and tech risk.
• Experience implementing risk frameworks (NIST, ISO, COBIT, cloud security).
• Knowledge of cloud platforms (AWS, Azure, GCP) and AI/ML.
• Certifications such as CISSP, CISM, CRISC, CISA, or CIPP desirable.
• Experience in asset management or financial services preferred.

Responsibilities

• Lead identification, assessment, and mitigation of tech, cyber, data, and privacy risks.
• Design enterprise-level information risk and control frameworks in a second line.
• Develop and monitor KRIs to evaluate control effectiveness.
• Provide independent oversight to first line tech and data teams.
• Collaborate with Internal Audit, Compliance, and Risk on control environment.
• Establish governance structures, policies, and reporting aligned with regulation.
• Deliver data-driven risk insights and reporting to senior leadership.
• Foster risk awareness and a strong risk culture.
• Lead and mentor a global, matrixed risk team.

Skills

Risk management

Information risk

Cybersecurity

Data governance

Regulatory compliance

Stakeholder influence

Education

Bachelor's degree in a related field

Tools

NIST

ISO/ COBIT

Job description

A global asset management firm is expanding its Enterprise Risk Management function and seeking a Data Governance & Controls Manager to play a key role in advancing its second line of defense capabilities. This team is responsible for partnering across the business to drive a consistent, data-driven approach to risk management while supporting ongoing transformation initiatives across technology, data, and operating models.

This role sits within a global ERM framework and will focus on enhancing the firm's approach to technology, cybersecurity, data governance, and privacy risk. The position will support senior leadership in strengthening oversight of first line risk management practices while evolving next-generation frameworks, controls, and governance structures.

Key Responsibilities:

• Lead identification, assessment, and mitigation of technology, cyber, data, and privacy risks, including cloud, AI/ML, and third-party exposures
• Design and implement enterprise-level information risk and control frameworks within a second line environment
• Develop and monitor Key Risk Indicators (KRIs) to evaluate control effectiveness across technology and data domains
• Partner closely with first line technology, data, and business teams to provide independent oversight, challenge, and guidance
• Collaborate with Internal Audit, Compliance, and Risk to enhance the overall control environment
• Establish and maintain governance structures, policies, and reporting aligned with regulatory expectations
• Deliver data-driven insights and risk reporting to senior leadership and stakeholders
• Drive risk awareness initiatives and foster a strong risk culture across the organization
• Lead and mentor team members within a global, matrixed risk organization

Requirements:

• 7-10 years of experience in risk management within financial services or consulting, with exposure to multiple lines of defense
• Strong expertise in information risk domains including cybersecurity, data governance, privacy, and technology risk
• Proven experience building and implementing risk frameworks (e.g., NIST, ISO, COBIT, cloud/security standards)
• Familiarity with cloud platforms (AWS, Azure, GCP) and emerging technologies (AI/ML)
• Strong analytical and problem-solving capabilities, with the ability to influence stakeholders
• Experience operating in a second line (or interacting closely with it) preferred
• Relevant certifications such as CISSP, CISM, CRISC, CISA, or CIPP highly desirable
• Prior experience in asset management or broader financial services strongly preferred