Data Risk Manager

ATC; Richmond (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

ATC is seeking an experienced Data Risk Manager to support a large-scale business and technology integration. The role focuses on assessing data risk across operational and analytical data flows, third-party integrations, data migrations, and downstream data consumption.

You will partner with Risk Management, Data Governance, Business, Technology, and Data Integration teams to identify risks, evaluate controls, and recommend mitigation strategies.

Qualifications

• Experience in Data Risk Management, Data Governance, Data Management, Technology Risk, or related discipline.
• Understanding of data governance and control concepts including access, sharing, movement, downstream consumption, and risk mitigation.
• Experience assessing third-party/vendor data risks, especially with external providers.
• Experience supporting data migrations, conversions, or large-scale technology transformations.
• Understanding data consumption pipelines and end-to-end data flows.
• Experience evaluating data access controls and data sharing restrictions.
• Experience performing risk assessments, control assessments, or independent validation of risk mitigation.
• Strong written and verbal communication skills translating data concepts into business risk assessments.

Responsibilities

• Assess data risks across operational and analytical data flows, including data entering, moving, and leaving enterprise systems.
• Partner with stakeholders to understand data architecture, integrations, migrations, conversions, and downstream consumption pipelines.
• Identify new/changing data risks from integrations, migrations, third-party services, and evolving architectures.
• Evaluate data access controls and risk mitigation measures to ensure least-privilege access for legitimate business purposes.
• Assess third-party data risk, including how external vendors access and consume data.
• Review data-sharing arrangements for potential overexposure and insufficient controls.
• Evaluate design and sufficiency of data management, governance, access, and technology controls; identify remediation actions.
• Perform validation of data controls and mitigation activities to confirm risks are addressed.
• Assess risks related to data migrations and conversions across legacy, target, third-party, and downstream systems.
• Develop and document data risk assessments, control evaluations, findings, and remediation recommendations.
• Translate complex technical concepts into executive summaries for business and risk stakeholders.

Skills

Data governance

Risk management

Data security

Third-party risk

Data migrations

Communication

Job description

• We are seeking an experienced Data Risk Manager to support a large-scale business and technology integration. This role will focus on assessing and managing data risk across operational and analytical data flows, third-party integrations, data migrations/conversions, and downstream data consumption.
• The Data Risk Manager will partner closely with Risk Management, Data Governance, Business, Technology, and Data Integration teams to understand evolving data architecture and identify risks associated with how data is accessed, transferred, transformed, shared, and consumed.
• A key focus of this role will be evaluating third-party data risk, particularly in environments where external vendors or service providers require access to organizational or customer data. The individual will assess whether appropriate data is being shared, ensure unnecessary or unauthorized data is restricted, evaluate existing controls, and recommend risk mitigation strategies.
• Key Responsibilities
• Assess data risks across operational and analytical data flows, including data entering, moving through, and leaving enterprise systems.
• Partner with Business, Technology, Data, Risk, and Governance stakeholders to understand data architecture, integrations, migrations, conversions, and downstream consumption pipelines.
• Identify new and changing data risks resulting from business and technology integrations, data migrations, third-party services, and evolving data architectures.
• Evaluate data access controls and risk mitigation measures to ensure users, systems, vendors, and third parties have access only to the data required for legitimate business purposes.
• Assess third-party data risk, including how external vendors receive, access, process, transfer, and consume organizational and customer data.
• Review third-party and downstream data-sharing arrangements to identify potential overexposure of data, excessive access, inappropriate data consumption, or insufficient controls.
• Evaluate the design and sufficiency of data management, data governance, access, and technology controls and identify control gaps requiring remediation.
• Perform or support independent validation of data controls and mitigation activities to determine whether identified risks have been appropriately addressed.
• Assess risks associated with data migrations and conversions, including data movement between legacy, target, third-party, and downstream systems.
• Develop and document data risk assessments, control evaluations, findings, mitigation strategies, and remediation recommendations.
• Apply strong analytical judgment to assess risk in an evolving integration environment where data architecture, processes, and controls may continue to change.
• Translate complex technical and data concepts into clear risk assessments, findings, recommendations, and executive-level summaries for business and risk stakeholders.

Required Qualifications

• Strong experience in Data Risk Management, Data Governance, Data Management, Technology Risk, or a closely related discipline.
• Demonstrated understanding of data governance and control concepts, including data access, data sharing, data movement, downstream consumption, and risk mitigation.
• Experience assessing third-party/vendor data risks, particularly where sensitive or customer data is shared with external service providers.
• Experience supporting or assessing data migrations, data conversions, system integrations, or large-scale technology transformation initiatives.
• Understanding of data consumption pipelines and end-to-end data flows, with the ability to evaluate how data moves between source systems, integrated platforms, third parties, and downstream consumers.
• Experience evaluating data access controls and determining whether access and data sharing are appropriately restricted based on business requirements and risk.
• Experience performing risk assessments, control assessments, and/or independent validation of risk mitigation activities.
• Strong analytical judgment with the ability to identify control gaps and assess risk in complex and evolving environments.
• Strong written and verbal communication skills, with demonstrated ability to translate technical and data concepts into business-focused risk assessments and executive summaries.

Role Description:

Data Risk Manager to support a large-scale business and technology integration by assessing data risk across operational and analytical data flows, third-party integrations, data mitigations, and downstream consumption The role will partner with business, technology, data, and risk stakeholders to understand evolving data architecture, identify new or changing data risks, evaluate the sufficiency of data management controls and validation activities, and support development of risk assessments and mitigation strategies.

The ideal candidate would have:

• Strong background in data management, data risk, data governance, or technology risk.
• Experience with data migrations/conversions
• Knowledge of data governance and control concepts
• Strong analytical judgement and ability to work effectively in evolving environments
• Strong written and verbal communication skills, particularly with experience translating data concepts into risk assessments and/or executive summaries