Manager, Cloud Governance

Job Title: Manager, Cloud Governance
Primary Location: Remote
Position Type: Direct Hire

Overview

TalentFish is casting a line for a Manager, Cloud Governance ! This role exists to oversee the firm's data management practices, ensuring that data across the firm's solutions is available and secure. The position is responsible for developing and implementing data standards and policies that support the organization's objectives, while facilitating effective data sharing and protection. By coordinating with departments across the firm, the Manager of Cloud Governance ensures that data protection practices align with regulatory requirements and business strategiesultimately enhancing the security processes and operational efficiency of the firm's data.

What You Bring to the Role (Ideal Experience)

• Bachelor's degree in Information Security, Information Assurance, Computer Science, Information Systems, or related field preferred.

• 7+ years of combined IT, information security, and risk management experience.

• Professional certifications strongly preferred: CISA, CISM, GSEC, CISSP, CRISC, or equivalent.

• Advanced understanding of Microsoft Purview and other data governance tools and methodologies.

• Strong understanding of risk management concepts, frameworks, and methodologies.

• Strong understanding of information security concepts and technologies.

• High-level technical understanding of security applications, platforms, and architectures.

• Advanced awareness of current information security standards and developments (CSF, NIST, ISO), as well as the emerging cyber threat landscape.

• Excellent project management, analytical, and problem-solving skills.

• Strong ability to develop/maintain relationships across departments.

• Fundamental knowledge of law firm operations is a plus.

• Advanced proficiency with MS Outlook, Word, Excel, Visio, and PowerPoint.

What You'll Do (Skills Used in this Position)

• Develop and implement a data governance framework that defines policies, procedures, and standards for managing organizational data assets from intake to disposal, leveraging tools such as Microsoft Purview Information Protection, Data Lifecycle Management, Data Loss Prevention, iManager Threat Manager, and Varonis.

• Design and enforce data retention policies and supporting technical controls.

• Design and enforce data classification policies and supporting technical controls.

• Review data security and privacy controls across solutions to protect data from unauthorized access, use, or disclosure.

• Provide training on data governance best practices to ensure employees understand their responsibilities in managing data.

• Partner with business stakeholders to understand data access/sharing requirements and influence secure, compliant solutions.

• Collaborate with the Information Governance Team to execute directives of the Office of the General Counsel.

• Design and implement reporting and alerting capabilities across solutions to support a robust data governance function.

• Provide thought leadership on O365 implementation and other cloud platforms.

• Partner with Security Architecture to develop secure design patterns for data governance.

• Work with the Governance, Risk, and Compliance team to ensure risks are logged in the risk register and assist in technical risk mitigation updates.

Compensation Information

The expected salary range for this position is $120,000-$150,000 per year, depending on experience and qualifications. This role may also qualify for comprehensive benefits such as health insurance, 401(k), and paid time off. TalentFish is committed to pay transparency and equal opportunity. The salary range provided complies with applicable state and federal regulations.

This role requires authorization to work in the U.S. without current or future visa sponsorship.

All offers are contingent upon the completion of a background check, which may include, but is not limited to: reference checks, education verification, employment verification, drug testing, criminal records checks, and any required certifications or compliance requirements based on the end client's background check policies and applicable laws.