Information Technology Governance Consultant

Brooksource; Kansas City (MO); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive medical, dental, vision coverage

401k with company match

Paid time off and holidays

Employee Assistance Program (EAP)

Job summary

A reputable technology firm in Kansas City seeks a leader for enterprise technology and data governance. The role involves designing and implementing policies, managing cyber risks, and ensuring compliance with regulations. Candidates should have a Bachelor's degree in Computer Science, extensive experience in information security, and relevant cybersecurity certifications. The position offers competitive benefits including healthcare, a 401k with company match, and employee support programs.

Qualifications

• 8 years information security experience required.
• Capability to define various governance models and policies.
• One or more professional cybersecurity certifications (e.g., Security+, CISA).
• Experience engaging Executive Leadership and translating risks into business terms.
• Proven governance program leadership and crossfunctional collaboration.
• Experience conducting risk assessments with security, privacy, legal, audit, and business teams.
• Knowledge of metadata, data cataloging, lineage, MDM, DSPM/DLP, and governance integrations.
• Applied experience with project management principles and methods.
• One or more cybersecurity certifications (e.g., Security+, CISA, CRISC, CISSP).

Responsibilities

• Lead design and implementation of technology governance.
• Ensure compliance with external laws and internal policies.
• Develop and operationalize data classification and retention policies.
• Stakeholder Communication: Deliver insights into risk posture and compliance status.
• Program Implementation: Lead deployment of GRC software to automate controls and reporting.
• Define and maintain charter, scope, and decision-rights model (RASCI) with stakeholders.
• Develop and operationalize data classification, minimization, and retention policies.
• Oversee inventory to enable discovery, lineage tracking, and risk analysis.
• Lead stewardship program design, assign data owners, embed stewardship in workflows.
• Design and run Data Risk Assessments to inform security investments.
• Liaise with external audits, regulatory reviews, and client-facing assessments for assurance.
• Specify controls and access governance and coordinate with IAM, DSPM/DLP, SIEM/SOC.
• Oversee integration of governance tooling (catalog, lineage, DSPM, DQ, MDM).
• Implement metrics and dashboards linking governance to KPIs and risk metrics.

Skills

Policy definition

Risk management

Stakeholder engagement

Data governance leadership

Technical knowledge of data governance concepts

Education

Bachelor Degree in Computer Science or related field

Tools

GRC software (e.g., Vanta, MetricStream)

MetricStream

Job description

This position is responsible for leading the design, implementation, and operation of enterprise technology and data governance within the security function. The leader will partner with the individual serving in the CISO role, the Chief Digital Technology Officer (CDTO), and key business stakeholders to ensure technology and data policies, decision rights, and controls align with business outcomes and risk appetite. This role owns program-level activities including technology and data inventory and mapping, classification and minimization, stewardship model, data access controls, data risk assessment, and governance metrics to support compliance, security, and AI readiness.

Job Duties

• Governance: Establish the rules, policies, and structures that direct how the technology and Business Enablement organization operates, ensuring accountability and strategic alignment
• Risk Management: Guide enterprise cyber risk management practices and alignment with business risk tolerance
• Compliance Oversight: Monitor adherence to external laws (e.g., GDPR) and internal policies to identify compliance gaps
• Stakeholder Communication: Partner with Executive Leaders and senior stakeholders to deliver meaningful insights into the organization’s risk posture and compliance status.
• Program Implementation: Lead the selection and deployment of GRC software (e.g., Vanta, MetricStream) to automate controls and reporting
• Define and maintain the technology and data governance charter, scope, and decision-rights model (RASCI) in collaboration with business and organizational stakeholders
• Develop and operationalize technology and data classification, minimization, and retention policies with business, privacy, and security partners
• Oversee the development of a prioritized inventory of technology and data assets to enable discovery, classification, lineage tracking, and risk analysis
• Lead stewardship program design and placement (centralized, federated, or hybrid), assign data owners and stewards, and embed stewardship into operational workflows
• Design and run Data Risk Assessments (DRA / FinDRA) to prioritize datasets by business impact and to inform security investment decisions.
• Serve as a primary liaison for external audits, regulatory reviews, and client-facing assessments to provide assurance and evidence for compliance activities
• Specify controls and access governance (PBAC/Purpose/role-based) and coordinate with IAM, DSPM/DLP, and SIEM/SOC as needed
• Select and oversee integration of governance tooling (catalog, lineage, DSPM, DQ, MDM, observability)
• Implement metrics, dashboards, and reporting that link governance activities to business KPIs and risk metrics for executive stakeholders
• All other duties as assigned

Requirements

• Bachelor Degree in Computer Science, Information Technology or related field.
• 8 years information security experience
• Capability to define policy, decision rights (RASCI), and steward models (centralized/federated/hybrid)
• Demonstrated ability to engage Executive Leadership, advance data literacy, convene steering committees, and translate risks into business and financial terms for senior leaders
• Proven experience leading technology or data governance programs and working crossfunctionally to operationalize classification, stewardship, access controls, risk assessments, exception management, and continuous improvement
• Experience conducting risk assessments and working with security, privacy, legal, audit, and business teams to translate risks into prioritized remediation and investment needs
• Technical knowledge of metadata, data cataloging, lineage, MDM, data quality, DSPM/DLP, DataOps/Data observability concepts, and governance platform integrations with data architectures.
• Applied experience in project management principles and methods
• One or more professional cybersecurity certifications (e.g., Security+, CISA, CRISC, CISSP)

EEO Statement

Brooksource is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression, sexual orientation, marital status, military service and veteran status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, or any other characteristic protected by applicable federal, state, or local laws and ordinances.

Benefits & Perks

Brooksource offers competitive medical, dental, vision, Health Savings Account, Dependent Care FSA, and supplemental coverage with plans that can fit each employee’s needs. We offer a 401k plan that includes a company match and is fully vested after you become eligible, paid time off, sick time, and paid company holidays. We also offer an Employee Assistance Program (EAP) that provides services like virtual counseling, financial services, legal services, life coaching, etc.

Pay Disclaimer

The pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.