Data Governance Technical Program Manager

The Wrap; Denver (CO); Hybrid; USD 138,000 - 165,000; Full time

Job summary

Gusto is hiring a Data Governance TPM to own the definition and delivery of a governance program across Data Platforms, R&D, Legal & Compliance, Security, AIT, and Risk. You'll stand up new controls, harden the data flows that feed our models, and make sure every workstream meets our regulatory, audit, and business bar.

You'll drive timelines, manage the dependencies, head off the risk, and use AI plugins to do the work itself, so governance becomes something that helps Gusto move faster instead

Qualifications

• 8+ years leading cross-functional TPM or delivery work in security, compliance, data, or infrastructure.
• Experience in regulated environments and with governance controls.
• Strong knowledge of data governance, access controls, data lifecycle, privacy, audit and ITGC.
• Ability to work with AI plugins to accelerate delivery and tooling usage.
• Excellent ability to communicate with engineering, legal, privacy, data platform, and security teams.

Responsibilities

• Set the strategy and roadmap for data governance across multiple teams.
• Run governance programs including access reviews, DSAR, data pipelines, and ITGC.
• Build governance workflows that leverage AI plugins for automated checks and evidence collection.
• Manage scope, risks, milestones, and audits; ensure regulatory commitments.
• Roll out controls and enable teams with training, communications, and runbooks.

Skills

Data governance

Security & Compliance

Stakeholder management

Tech liaison

AI plugins

Tools

AI plugins (MCPs)

Job description

About Gusto

At Gusto, we're on a mission to grow the small business economy. We handle the hard stuff — payroll, health insurance, 401(k)s, and HR — so owners can focus on their craft and their customers. With teams in Denver, San Francisco, and New York, we support more than 500,000 small businesses nationwide and are building a workplace that reflects the people we serve.

All full-time employees receive competitive base pay, benefits, and equity (RSUs) — because everyone who helps build Gusto should share in its success. Offer amounts are determined by role, level, and location. Learn more about our Total Rewards philosophy.

AI is a fundamental part of how work gets done at Gusto. We expect all team members to actively engage with AI tools relevant to their role and grow their fluency as the technology evolves. AI experience requirements vary by role and will be assessed during the interview process.

About the Role:

Gusto is becoming an AI-native company, and that only works if our data governance keeps pace. As the Data Governance TPM, you'll own the definition and delivery of that program across Data Platforms, R&D, Legal & Compliance, Security, AIT, and Risk. You'll stand up new controls, harden the data flows that feed our models, and make sure every workstream meets our regulatory, audit, and business bar. You'll drive the timelines, manage the dependencies, head off the risk, and use AI plugins to do the work itself, so governance becomes something that helps Gusto move faster instead of slowing it down.

About the Team:

The TPM organization is part of our AIT, Risk, and Security team. We deliver the cross-functional work that lets Gusto securely accelerate its AI and platform modernization. The Data Governance program sits right at the intersection of security, compliance, and platform engineering, and it's foundational to how Gusto scales its AI ambitions responsibly. This is one of the most strategic programs on the team, and you'll lead it across a complex, fast-moving group of stakeholders.

Here’s what you’ll do day-to-day:

Set the strategy and the roadmap

• Work with leaders across Security, Legal, Compliance, Privacy, GRC, Data Platforms, and Risk to shape where data governance goes as Gusto becomes an AI-native company.


• Define what good governance looks like for an AI-first business, and set the multi-quarter vision that gets us there.


• Run intake and prioritization with senior stakeholders, and make the call on what gets built first.


• Decide where governance should clear the way for AI speed and where it needs to hold the line, and bring leaders along on the why.


• Put AI plugins to work to pull together stakeholder input, map dependencies, and keep the roadmap grounded in what's really happening.

Run the programs and the change

• Lead delivery across the governance portfolio. That includes RBAC and User Access Reviews, DSAR, Kafka and data pipeline governance, ITGC, disaster recovery, feature stores for Risk models, and cleaning identifiable data before it ever reaches a model.


• Build governance workflows that run on AI plugins by default, so control checks and evidence collection happen automatically instead of by hand.


• Build the plans, manage scope and risk, track milestones, and deliver against every audit and regulatory commitment.


• Roll out new controls and help teams adopt them with training, comms, and runbooks that plugins keep up to date for you.


• Keep a busy, fast-moving group of stakeholders aligned with clear, steady updates on where things stand.

Manage stakeholders and vendors

• Hold vendors and partners to their commitments and push them toward AI-forward ways of working.


• Stay on top of how every workstream is tracking, raise flags early, and get teams unstuck when they stall.


• Watch the program budget, tooling spend, and implementation costs.

Here’s what we're looking for:

You'll need

• A history of taking programs from ambiguous to shipped in regulated environments.


• 8+ years leading cross-functional TPM or delivery work, with real time spent on security, compliance, data, or infrastructure.


• A solid handle on data governance, from access controls and data lifecycle to privacy, audit and ITGC, and data pipelines, and a sense for how they help Gusto move faster on AI.


• A way of working where AI plugins drive your everyday delivery, and you help the people around you work the same way.


• The ability to speak the language of engineering, legal, privacy, data platform, and security, and keep everyone rowing together.

Nice to have

• Familiarity with AI and ML governance, including training data hygiene, feature stores, and ML platform tooling.


• Hands-on experience using AI clients and plugins (MCPs) to generate program artifacts and take the busywork off your plate.


• A working knowledge of control frameworks like SOC 1/2, ISO 27001, and ISO 42001, plus privacy regulations like GDPR and CCPA.


• A PM certification (PMP, CAPM, Scrum, or Prosci) and time spent in high-growth fintech or another regulated, fast-paced industry.

Our cash compensation amount for this role is targeted at $138,000-165,000 in Denver. Final offer amounts are determined by multiple factors including candidate experience and expertise and may vary from the amounts listed above.

Gusto has physical office spaces in Denver, San Francisco, and New York City. Employees who are based in those locations will be expected to work from the office on designated days approximately 2-3 days per week (or more depending on role). The same office expectations apply to all Symmetry roles, Gusto's subsidiary, whose physical office is in Scottsdale.

Note: The San Francisco office expectations encompass both the San Francisco and San Jose metro areas.

When approved to work from a location other than a Gusto office, a secure, reliable, and consistent internet connection is required. This includes non-office days for hybrid employees.

Our customers come from all walks of life and so do we. We hire great people from a wide variety of backgrounds, not just because it's the right thing to do, but because it makes our company stronger.

Gusto is proud to be an equal opportunity employer.

We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic.

Gusto considers qualified applicants with criminal histories, consistent with applicable federal, state and local law.

Gusto is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures.

We want to see our candidates perform to the best of their ability.

If you require a medical or religious accommodation at any time throughout your candidate journey, please fill out this form and a member of our team will get in touch with you.

Gusto takes security and protection of your personal information very seriously. Please review our Fraudulent Activity Disclaimer.

Personal information collected and processed as part of your Gusto application will be subject to Gusto's Applicant Privacy Notice.