Data Governance & Controls, Sr. Manager

Selby Jennings; Houston (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Selby Jennings is seeking a Data Governance & Controls Manager to strengthen the second line of defense in a global asset management firm. The role emphasizes technology, cybersecurity, data governance, and privacy risk to support transformation initiatives across data, tech, and operating models.

You will lead cross-functional risk assessments, design enterprise risk frameworks, and develop KRIs while partnering with first line teams for independent oversight and timely risk reporting.

Qualifications

• 7–10 years of risk management experience in financial services or consulting.
• Strong expertise in information risk domains including cybersecurity, data governance, privacy, and technology risk.
• Experience building and implementing risk frameworks (NIST, ISO, COBIT, cloud/security).
• Familiarity with cloud platforms (AWS, Azure, GCP) and emerging technologies (AI/ML).
• Certifications such as CISSP, CISM, CRISC, CISA, or CIPP are highly desirable.
• Prior asset management or financial services experience preferred.

Responsibilities

• Lead identification, assessment, and mitigation of technology, cyber, data, and privacy risks across the organization.
• Design and implement enterprise-level information risk and control frameworks within a second line environment.
• Develop and monitor KRIs to evaluate control effectiveness across technology and data domains.
• Partner with first line technology, data, and business teams to provide independent oversight, challenge, and guidance.
• Collaborate with Internal Audit, Compliance, and Risk to enhance the overall control environment.
• Establish and maintain governance structures, policies, and reporting aligned with regulatory expectations.
• Deliver data-driven insights and risk reporting to senior leadership and stakeholders.
• Drive risk awareness initiatives and foster a strong risk culture across the organization.
• Lead and mentor team members within a global, matrixed risk organization.

Skills

Risk management

Stakeholder influence

Analytical thinking

Second line collaboration

Education

CISSP

CISM

CRISC

CISA

CIPP

Tools

NIST framework

ISO 27001

COBIT

Job description

A global asset management firm is expanding its Enterprise Risk Management function and seeking a Data Governance & Controls Manager to play a key role in advancing its second line of defense capabilities. This team is responsible for partnering across the business to drive a consistent, data-driven approach to risk management while supporting ongoing transformation initiatives across technology, data, and operating models.

This role sits within a global ERM framework and will focus on enhancing the firm's approach to technology, cybersecurity, data governance, and privacy risk. The position will support senior leadership in strengthening oversight of first line risk management practices while evolving next-generation frameworks, controls, and governance structures.

Key Responsibilities:

• Lead identification, assessment, and mitigation of technology, cyber, data, and privacy risks, including cloud, AI/ML, and third-party exposures
• Design and implement enterprise-level information risk and control frameworks within a second line environment
• Develop and monitor Key Risk Indicators (KRIs) to evaluate control effectiveness across technology and data domains
• Partner closely with first line technology, data, and business teams to provide independent oversight, challenge, and guidance
• Collaborate with Internal Audit, Compliance, and Risk to enhance the overall control environment
• Establish and maintain governance structures, policies, and reporting aligned with regulatory expectations
• Deliver data-driven insights and risk reporting to senior leadership and stakeholders
• Drive risk awareness initiatives and foster a strong risk culture across the organization
• Lead and mentor team members within a global, matrixed risk organization

Requirements:

• 7-10 years of experience in risk management within financial services or consulting, with exposure to multiple lines of defense
• Strong expertise in information risk domains including cybersecurity, data governance, privacy, and technology risk
• Proven experience building and implementing risk frameworks (e.g., NIST, ISO, COBIT, cloud/security standards)
• Familiarity with cloud platforms (AWS, Azure, GCP) and emerging technologies (AI/ML)
• Strong analytical and problem-solving capabilities, with the ability to influence stakeholders
• Experience operating in a second line (or interacting closely with it) preferred
• Relevant certifications such as CISSP, CISM, CRISC, CISA, or CIPP highly desirable
• Prior experience in asset management or broader financial services strongly preferred