Data Risk & Governance Lead

ATC; Richmond (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

ATC is seeking an experienced Data Risk Manager to support a large-scale business and technology integration. The role focuses on assessing data risk across operational and analytical data flows, third-party integrations, data migrations, and downstream data consumption.

You will partner with Risk Management, Data Governance, Business, Technology, and Data Integration teams to identify risks, evaluate controls, and recommend mitigation strategies.

Qualifications

• Experience in Data Risk Management, Data Governance, Data Management, Technology Risk, or related discipline.
• Understanding of data governance and control concepts including access, sharing, movement, downstream consumption, and risk mitigation.
• Experience assessing third-party/vendor data risks, especially with external providers.
• Experience supporting data migrations, conversions, or large-scale technology transformations.
• Understanding data consumption pipelines and end-to-end data flows.
• Experience evaluating data access controls and data sharing restrictions.
• Experience performing risk assessments, control assessments, or independent validation of risk mitigation.
• Strong written and verbal communication skills translating data concepts into business risk assessments.

Responsibilities

• Assess data risks across operational and analytical data flows, including data entering, moving, and leaving enterprise systems.
• Partner with stakeholders to understand data architecture, integrations, migrations, conversions, and downstream consumption pipelines.
• Identify new/changing data risks from integrations, migrations, third-party services, and evolving architectures.
• Evaluate data access controls and risk mitigation measures to ensure least-privilege access for legitimate business purposes.
• Assess third-party data risk, including how external vendors access and consume data.
• Review data-sharing arrangements for potential overexposure and insufficient controls.
• Evaluate design and sufficiency of data management, governance, access, and technology controls; identify remediation actions.
• Perform validation of data controls and mitigation activities to confirm risks are addressed.
• Assess risks related to data migrations and conversions across legacy, target, third-party, and downstream systems.
• Develop and document data risk assessments, control evaluations, findings, and remediation recommendations.
• Translate complex technical concepts into executive summaries for business and risk stakeholders.

Skills

Data governance

Risk management

Data security

Third-party risk

Data migrations

Communication

Job description

ATC is seeking an experienced Data Risk Manager to support a large-scale business and technology integration. The role focuses on assessing data risk across operational and analytical data flows, third-party integrations, data migrations, and downstream data consumption.

You will partner with Risk Management, Data Governance, Business, Technology, and Data Integration teams to identify risks, evaluate controls, and recommend mitigation strategies.