Info Governance & Risk Compliance Program Lead

Tennessee Comptroller of the Treasury; Nashville (TN); On-site; USD 85,000 - 120,000; Full time

Job summary

Tennessee Comptroller of the Treasury is seeking an Information Governance, Policy, and Compliance Program Manager to develop and maintain governance, policy, risk, and compliance programs across the organization. You will coordinate with Technology Solutions, legal, internal audit, procurement, and business units to protect and manage organizational information.

The role sits within the security team, leading data governance, policy lifecycle, audits, and risk remediation while delivering

Qualifications

• Bachelor’s degree or equivalent experience in IT, cybersecurity, information systems, or related field.
• Experience developing or managing organizational policies, compliance programs, risk management, audits, information governance, or cybersecurity governance.
• Strong written and verbal communication for technical and nontechnical audiences.
• Proven ability to manage multiple initiatives, meet deadlines, and coordinate across teams.
• Sound judgment when handling sensitive or regulated information.

Responsibilities

• Manage the Office’s information security, privacy, technology, and data governance policies and lifecycle.
• Lead the data governance program: ownership, classification, stewardship, retention, access, and use.
• Coordinate compliance activities across laws, audits, standards; maintain risk register and corrective actions.
• Collect and organize audit evidence and support assessments and regulatory inquiries.
• Document risk assessments, mitigations, exceptions, and remediation plans; report status to leadership.
• Coordinate third‑party and vendor risk reviews with Procurement, GC, and Technology Solutions.
• Support business continuity, disaster recovery, and incident‑response documentation.
• Develop and deliver communications and training on security, privacy, data governance, and policy awareness.
• Provide clear reporting on compliance posture, data governance, risks, and decisions.

Skills

Information governance

Policy development

Risk management

Audits & compliance

Cross‑functional collaboration

Technical writing

Education

Bachelor’s degree in IT/cybersecurity/records management or related field

Tools

NIST CSF

ISO 27001

CIS Controls

Job description

Tennessee Comptroller of the Treasury is seeking an Information Governance, Policy, and Compliance Program Manager to develop and maintain governance, policy, risk, and compliance programs across the organization. You will coordinate with Technology Solutions, legal, internal audit, procurement, and business units to protect and manage organizational information.

The role sits within the security team, leading data governance, policy lifecycle, audits, and risk remediation while delivering