Manager, Information Security and Data Governance

 

 

Summary

Manager, Information Security and Data Governance is responsible for developing and implementing a strategic vision for the organization's data management, governance, protection, privacy and security, in compliance with company internal policies and procedures, contractual requirements and external regulations.

This role requires a leader who can maximize the effective use of data to drive business value while safeguarding the organization against data breaches and cyber threats. Leads cross-functional teams to establish robust data governance frameworks, secure the organization's digital assets, and promote a data-driven culture.

 

Leads a high-performing security and data governance team, provides strategic and tactical guidance, and complete execution of the cybersecurity program supporting global enterprise security initiatives, systems, applications and operations.

 

Essential Duties and Responsibilities

 

Information Security

• Develops and maintains a comprehensive cybersecurity strategy and security policies.
• Serve as an information security expert and trusted advisor for Information Infrastructure and Systems projects.
• Advises the executive team on security risks, compliance requirements, and best practices.
• Identifies current and emerging information security and compliance requirements of the organization and coordinates the implementation of solutions that address these requirements.
• Leads efforts to achieve and maintain compliance with relevant cybersecurity frameworks and standards (e.g., NIST, CMMC).
• Oversees cyber incident response plan and ensures alignment with the parent company's broader IT response strategy.
• Ensures consistency with IT processes, strengthens Greenpoint Technologies cyber threat resilience and optimizes reporting of identified threats and vulnerabilities.
• Leads a team of subject matter experts to ensure effective Information Security management throughout the IT service delivery lifecycle, including Security Operations, Security Architecture and Security Assurance.
• Provides oversight and assists as needed in investigating security breaches.
• Other duties as assigned.

 

Data Governance

• Establishes and implements a data governance framework that aligns with organizational objectives and regulatory requirements, including policies, standards, and procedures for data management.
• Creates and maintains a data register to document all data assets, their classifications, including ownership and stewardship roles to ensure accountability for data quality and compliance.
• Develops and maintains a data classification policy to guarantee proper handling, access, and segregation of sensitive information, including intellectual property.
• Partners with the business stakeholders to promote data governance initiatives supporting consistent and continuous adherence to data governance policies and procedures.
• Fosters a data-driven culture by providing training and resources to data stewards and users.
• Develops, monitors and enforces compliance with relevant regulations and standards related to data management and privacy.
• Ensures compliance with data privacy regulations (e.g., GDPR, CCPA) and industry standards.
• Develops and enforces data security policies to protect sensitive information, including Intellectual Property, from internal or external unauthorized access, usage and breaches.
• Implements processes and controls to safeguard intellectual property and proprietary information.
• Defines and enforces policies for IP handling, storage, and sharing to meet contractual requirements.
• Partners and collaborates with legal and contracts teams to ensure applicable contracts include provisions for data protection and IP security.
• Conducts regular audits and assessments to identify and address data governance gaps.
• Evaluates and implements data governance tools and technologies to support data management and compliance efforts.
• Monitors the effectiveness of data governance tools and make recommendations for improvements.
• Maintains regular attendance including being at work, being on time to work and working full shifts.
• Other duties as assigned.