Information Governance Regulatory and Privacy Manager

Information Governance Regulatory and Privacy Manager

Cooley is seeking an Information Governance Regulatory and Privacy Manager to join the IS Information Governance team.

Position summary:  Cooley Information Services (IS) embraces a culture of customer service excellence and all members of the department are expected to move this agenda forward. To that end, the Information Governance Regulatory and Privacy Manager is expected to recognize that the Cooley IS department is a service organization first and foremost and will be evaluated on this requirement equal in importance to the technical or operational responsibilities outlined in this document.

The Information Governance Regulatory and Privacy Manager is responsible for managing information risk and ensuring compliance with security and privacy regulation requirements through the firm’s governance risk and compliance program. This includes responsibility for vendor security assessment, analysis of client security obligations, cyber security audits, data mapping, privacy regulation compliance etc.  The IG Regulatory and Privacy Manager is responsible for managing the IG  Regulatory and Privacy business professionals and promoting compliance and awareness of firm policies and procedures specific to governance, risk and compliance and to records and information management. Specific duties and responsibilities include, but are not limited to, the following:

Position responsibilities: 

• Develop goals and objectives for IG Regulatory and Privacy team in conjunction with IG strategic planning
• Develop preliminary annual operating budgets and monitor monthly expenditures
• Apply industry principles and theories of data protection, privacy and business confidentiality to the records and information management process in coordination with IS Security
• Evaluate headcount resource requirements and provide recommendations to maximize capacity and staffing ratio efficiencies
• Manage direct report workflow, as required
• Audit and track the firm’s responsibilities against Outside Counsel Guideline agreements
• Manage vendor security assessment process
• Develop and implement IG  Regulatory and Privacy training programs for end users
• Develop and maintain documentation of IG  Regulatory and Privacy operations procedures
• Understand all aspects of the firm’s IG Policy and be able to articulate relative obligations to Firm stakeholders
• Negotiate and recommend vendor contracts for IG  Regulatory and Privacy functions.  Manage vendor relationships and analyze vendor relations specific to performance, contract compliance, and quality/accuracy controls to ensure business partner compliance with contract terms
• Identify projects and coordinate resources to ensure successful completion of projects and achieve organizational goals and objectives
• Conduct both internal and external audits to ensure compliance with all industry-mandate regulations
• Identify, develop, and maintain relationships to maximize support and accomplish organizational goals
• Manage operational information governance and privacy activities and the security team to enhance the firm’s information governance programs in line with ISO 27001, ISO 27701, GDPR, CCPA and all applicable privacy regulations
• Maintain the firm’s ISO certifications
• Assess and track the firm’s compliance to existing and future global regulations in privacy and security
• Oversee a network of operational teams and vendors to maintain the information life cycle of the company’s assets and be actively informed and engaged in daily information governance and privacy operations
• Implement and maintain controls and monitoring that ensure the confidentiality, integrity and availability of firm and client information
• Under guidance of the Associate Director of Information Governance and Data Privacy, assist in the procurement and implementation of technology to support information governance and privacy
• Remain current in emerging technologies and trends to manage information assets; recommend appropriate changes to improve records functions
• Manage compliance labels and polices in Microsoft O365/M365
• Oversee the installation, configuration and maintenance of IG systems and tools in accordance with firm needs, standards, and regulations
• Serve as direct supervisor and mentor to direct reports
• Provide day-to-day supervision of direct reports, ensure compliance with assigned work hours and monitor for compliance with all firm and department policies. Manage staffing coverage, review and process time logs/time off requests
• Support business professional development and continued educational opportunities
• In collaboration with immediate supervisor and CN HR, participate in hiring, performance appraisa