Information Governance & GRC Lead (AI/M365)

IMG LIVE; Beverly Hills (CA); On-site; USD 131,000 - 175,000; Full time

Job summary

WME Group in Beverly Hills is seeking an Information Manager who will own the organization’s information and data governance, including SharePoint/OneDrive content lifecycle, retention, and data classification under Purview, as well as risk management and AI governance.

You will oversee the risk register, control testing, third-party risk, and policy authoring, coordinating with Legal and external auditors; this role reports to the technology governance function and partners across the

Qualifications

• 8+ years in information governance and GRC, incl. leadership.
• Hands-on Microsoft Purview (DLP, retention, sensitivity labels, records management).
• Data classification across a Microsoft 365 estate.
• GRC frameworks; risk treatment and control testing.
• Compliance literacy across GDPR, CCPA/CPRA, PIPL, and SOX ITGC.
• Third-party risk management, policy authoring, and audit liaison.
• Bachelor’s degree or equivalent; relevant certifications required.

Responsibilities

• Own information governance across the M365 estate and Purview tooling.
• Maintain risk register, conduct control testing, and provide compliance evidence.
• Manage third-party and supply-chain risk assessments and monitoring.
• Govern AI and emerging tech policy in coordination with technology governance.
• Author and maintain cybersecurity and information policy; liaise with auditors and Legal.
• Operate enterprise GRC platform and Purview toolset.

Skills

Information governance

GRC / risk & compliance

Microsoft Purview

M365 governance

Data classification

AI governance

Policy authoring

Education

Bachelor’s degree or equivalent

CISA, CIPP, CRISC, IGP, or IAPP certification

Tools

Microsoft Purview

SharePoint / OneDrive administration

Job description

WME Group in Beverly Hills is seeking an Information Manager who will own the organization’s information and data governance, including SharePoint/OneDrive content lifecycle, retention, and data classification under Purview, as well as risk management and AI governance.

You will oversee the risk register, control testing, third-party risk, and policy authoring, coordinating with Legal and external auditors; this role reports to the technology governance function and partners across the