GRC & Information Governance Leader

WME - William Morris Endeavour; Beverly Hills (CA); On-site; USD 131,000 - 175,000; Full time

Job summary

WME - William Morris Endeavour is seeking an Information Manager to own governance of information, data, and assurance programs. You will manage SharePoint/OneDrive content, retention, data classification, and Purview controls while leading risk, third-party risk, AI governance, and policy initiatives.

The role requires 8+ years in information governance and GRC, hands-on Purview/M365 governance, and relevant certifications.

Qualifications

• 8+ years in information governance and GRC/risk & compliance, incl. 3+ years in a lead role.
• Hands-on Microsoft Purview (DLP, retention, sensitivity labels, records management) and M365 governance.
• Data classification and stewardship across a Microsoft 365 estate.
• GRC frameworks; risk treatment and independent testing.
• Compliance literacy across GDPR, CCPA/CPRA, PIPL, and SOX ITGC.
• Experience with third-party risk management, policy authoring, and audit liaison.
• Bachelor’s degree or equivalent; relevant certifications required.

Responsibilities

• Own information governance across the M365 estate with Purview.
• Own data classification and stewardship across the estate.
• Own the risk register, control testing, and compliance evidence.
• Run third-party and supply-chain risk assessments and monitoring.
• Own AI governance and emerging-tech policy with the tech governance function.
• Author and maintain cybersecurity and information policy; liaise with Auditors/Legal.
• Own and operate the enterprise GRC platform and Purview toolset.

Skills

GRC & risk management

Policy development

Audit liaison

Data governance

Regulatory knowledge (GDPR/CCPA)

Education

Bachelor’s degree or equivalent experience

CISA

CIPP

CRISC

IAPP

Tools

Microsoft Purview

M365 governance

DLP

Records management

Job description

WME - William Morris Endeavour is seeking an Information Manager to own governance of information, data, and assurance programs. You will manage SharePoint/OneDrive content, retention, data classification, and Purview controls while leading risk, third-party risk, AI governance, and policy initiatives.

The role requires 8+ years in information governance and GRC, hands-on Purview/M365 governance, and relevant certifications.