Data Governance (Privacy and Security) Expert

Role overview

Privacy, compliance, and security

• Monitor legal, regulatory, contractual, and organizational compliance and assess privacy and security frameworks for gaps.
• Conduct privacy impact and data protection risk assessments; recommend corrective and preventive actions.
• Support audits, develop remediation plans, and monitor implementation.
• Develop and maintain data security policies, standards, procedures, and controls for sensitive data.
• Support identity and access management, secure handling, encryption, classification, retention, and secure disposal.
• Monitor security controls and recommend improvements.

Data governance and reporting

• Establish governance frameworks, standards, policies, procedures, metadata structures, data definitions, and data entry and retrieval rules.
• Support data discovery, mapping, classification, and unified governance platforms.
• Work with stakeholders to maintain data quality, consistency, integrity, and accuracy.
• Analyze data trends and dataset gaps and prepare governance, compliance, privacy, and risk reports.
• Establish standards for reporting, presenting, and sharing organizational data.

Advisory and awareness

• Advise business, legal, compliance, operational, and technical teams on governance, privacy, and security.
• Review projects, systems, vendors, and business initiatives for data protection needs; support privacy-by-design and security-by-design.
• Develop and deliver training and awareness initiatives on privacy, governance, cybersecurity, and secure data handling.
• Support continuous improvement and related special projects.

Experience and education

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Management, Information Technology, or a related field.
• At least 15 years of experience in data privacy, protection, information security, governance, compliance, cybersecurity frameworks, and regulatory compliance.
• Experience in highly regulated environments, preferably healthcare or other sensitive-data environments.
• Proven experience implementing enterprise privacy and governance programs and conducting impact assessments, compliance reviews, and governance audits.
• Additional education, certifications, or specialized training in privacy, governance, cybersecurity, or compliance is preferred.

Technical knowledge and certifications

• Strong understanding of privacy laws, security frameworks, data governance, risk management, compliance, and impact assessment methods.
• Framework knowledge includes ISO 27001, ISO 27701, ISO 27018, NIST, and CIS Benchmarks.
• Experience with cloud security, identity and access management, data discovery and classification, privacy tools, governance platforms, monitoring, reporting, and documentation.
• Preferred certifications include CIPP, CDPSE, CISSP, ISO 27001 Lead Implementer or Lead Auditor, or equivalent.

Skills and competencies

• Analytical problem-solving, stakeholder management, communication, auditing, reporting, and documentation.
• Ability to develop governance frameworks, policies, and compliance programs; lead cross-functional initiatives; manage priorities; and deliver training and advisory support.