GRC & Information Governance Lead

Wme Group; Beverly Hills (CA); Sur place; USD 131 000 - 175 000; Plein temps

Résumé du poste

The Information Manager at WME Group owns the organization’s information governance and security assurance programs, overseeing SharePoint/OneDrive, retention, data classification, and Microsoft Purview controls. The role partners with Legal and external auditors to maintain policies and evidence across the GRC lifecycle.

Responsibilities include managing risk registers, control testing, third‑party risk assessments, AI governance, and policy authoring; and operating the enterprise GRC platform

Qualifications

• 8+ years spanning information governance and GRC, including 3+ years in a lead or manager role.
• Hands-on Microsoft Purview (DLP, retention, sensitivity labels, records management) and M365 information governance.
• Data classification and stewardship across a Microsoft 365 estate.
• GRC and risk-management frameworks; risk treatment and independent control testing.
• Compliance literacy across GDPR, CCPA/CPRA, PIPL, and SOX ITGC.
• Third-party risk management, policy authoring, and audit liaison experience.
• Bachelor's degree or equivalent experience; a relevant certification (CISA, CIPP, CRISC, IGP, or IAPP) required.

Responsabilités

• Own information governance across the M365 estate - SharePoint/OneDrive content lifecycle, retention and records management, sensitivity classification, and stewardship - operated through Microsoft Purview.
• Own data classification and stewardship across the estate, aligned to the data-tier security standard.
• Own the risk register, control testing, and compliance evidence; independently test and attest control effectiveness.
• Run third-party and supply-chain risk (TPRM) - assessments, tiering, and ongoing monitoring.
• Own AI governance and emerging-tech policy in coordination with the technology-governance function.
• Author and maintain cybersecurity and information policy; liaise with external auditors and Legal.
• Own and operate the enterprise GRC platform and the Purview toolset.

Connaissances

Information governance

GRC / risk & compliance

M365 Purview

Data classification

Policy authoring

Audit liaison

Formation

Bachelor's degree or equivalent

CISA, CIPP, CRISC, IGP, or IAPP

Outils

Microsoft Purview

GRC platform

Description du poste

The Information Manager at WME Group owns the organization’s information governance and security assurance programs, overseeing SharePoint/OneDrive, retention, data classification, and Microsoft Purview controls. The role partners with Legal and external auditors to maintain policies and evidence across the GRC lifecycle.

Responsibilities include managing risk registers, control testing, third‑party risk assessments, AI governance, and policy authoring; and operating the enterprise GRC platform