Senior Information Governance & GRC Leader

WME; Beverly Hills (CA); On-site; USD 131,000 - 175,000; Full time

Job summary

WME is seeking an Information Manager to own the organization’s information governance and security assurance program. You’ll govern SharePoint/OneDrive content, retention, data classification, and Microsoft Purview controls, with a dotted line to Legal for records, privacy, and disclosures.

You’ll manage risk registers, third‑party risk, AI governance, policy creation, and audit liaison, while operating the enterprise GRC platform and Purview toolset.

Qualifications

• 8+ years spanning information governance and GRC / risk & compliance, including lead/manager level.
• Hands-on Microsoft Purview (DLP, retention, sensitivity labels, records management) and M365 governance.
• Data classification and stewardship across a Microsoft 365 estate.
• GRC frameworks; risk treatment and independent testing.
• Compliance literacy across GDPR, CCPA/CPRA, PIPL, and SOX ITGC.
• Third-party risk management, policy authoring, and audit liaison experience.
• Bachelor’s degree or equivalent; relevant certifications required.

Responsibilities

• Own information governance across the M365 estate — SharePoint/OneDrive content lifecycle, retention and records management, sensitivity classification, and stewardship — operated through Microsoft Purview.
• Own data classification and stewardship across the estate, aligned to the data-tier security standard.
• Own the risk register, control testing, and compliance evidence; independently test and attest control effectiveness.
• Run third-party and supply-chain risk (TPRM) — assessments, tiering, and ongoing monitoring.
• Own AI governance and emerging-tech policy in coordination with the technology-governance function.
• Author and maintain cybersecurity and information policy; liaise with external auditors and Legal.
• Own and operate the enterprise GRC platform and the Purview toolset.

Skills

Information governance

GRC / risk management

Leadership experience

Audit liaison

Education

Bachelor’s degree or equivalent

Certifications: CISA / CIPP / CRISC / IGP / IAPP

Tools

Microsoft Purview

M365 information governance

Job description

WME is seeking an Information Manager to own the organization’s information governance and security assurance program. You’ll govern SharePoint/OneDrive content, retention, data classification, and Microsoft Purview controls, with a dotted line to Legal for records, privacy, and disclosures.

You’ll manage risk registers, third‑party risk, AI governance, policy creation, and audit liaison, while operating the enterprise GRC platform and Purview toolset.