From the listing
About the role
Our data environment has grown quickly, handling cross-region data across the US, Japan, EU, and other markets. We are evaluating new analytics and AI tools regularly and need someone to help us catch up and stay ahead of partner and regulatory expectations.
The team is fully remote. This is an individual contributor role reporting to the Chief Information & Security Officer (CISO) with a dotted-line relationship to Data Engineering and Data Science.
What you'll do
- Build and maintain data governance policies, classification standards, ownership models, and exception processes.
- Own data access governance for the lakehouse and analytics stack including entitlement standards and periodic access reviews.
- Work with Data Engineering on technical controls such as Ranger policies, schema restrictions, and service account management.
- Set data quality standards and help Data teams track and improve against them.
- Keep data inventory, metadata, and lineage documentation current for compliance and audit purposes.
- Review data-related vendors and new use cases with Security, Privacy, and Legal.
- Support sensitive and cross-border data requests, including PII handling and regional data flows.
- Prepare evidence for SOC 2, ISO 27001, CSA STAR, partner security reviews, and regulatory exams.
- Track data risks and control gaps as part of the Enterprise Risk Management program.
- Help define guardrails for AI and agentic use of corporate data in analytics workflows.
What they're looking for
- 5+ years in data governance, data security, GRC, privacy engineering, or a related field.
- At least 2 years working with modern data platforms (lakehouse/warehouse, SQL engines, BI, semantic layers).
- Solid grasp of data governance frameworks (DAMA-DMBOK, NIST, or similar).
- Experience building or running data classification, access control, or entitlement review programs.
- Familiar with cloud data platforms (GCP a plus) and typical analytics tooling.
- Working knowledge of privacy and regulatory requirements in financial services (GDPR, CCPA, etc.).
- Experience supporting SOC 2, ISO 27001, or similar audits.
- Strong written and verbal communication skills.
- Comfortable as an IC with no direct reports in a fast-paced remote environment.
Nice to have
- Fintech, brokerage, or regulated financial services background.
- Hands-on experience with Trino, Apache Ranger, dbt, Cube, Metabase, Airflow, or Iceberg.
- Experience reviewing AI/ML and analytics tools.
- Privacy program or vendor/DPA review experience.
- CIPT, CIPM, CISM, CISSP, CDMP, CRISC, or similar certifications.
- Previous experience as the first governance hire at a growing company.
- Experience with Japan or EU data residency and cross-border data issues.
- Exposure to ERM or operational risk.
Members-only role.
Anything that names the company is hidden. Unlock this job for the company, the full listing and the apply link.
From the company page
Benefits
Work from anywhereComprehensive benefitsWorkspace stipendEquity in company