Data Management Risk Officer

Leads the development and continuous improvement of the data management risk governance framework, including standards, controls, and risk appetite, while assessing regulatory impacts and driving enhancements. Provides independent oversight and effective challenge by evaluating risk exposures, control effectiveness, and compliance, and identifying emerging risks to inform decision-making and escalation. Oversees governance and regulatory reporting, supports audits and examinations, and ensures appropriate review processes. Advises stakeholders on framework implementation, drives communication and training to promote consistent adoption, and manages core governance processes, tools, and artifacts supporting risk assessment and ongoing monitoring.

Governance & Framework

• Lead the development, maintenance, and continuous improvement of the data management risk governance framework, including standards, policies, procedures, lifecycle management, controls, risk appetite and risk metrics.

• Interpret regulatory developments and emerging industry practices, assess impacts on the governance framework, and recommend enhancements to controls, processes, and documentation.

Risk Assessment & Oversight

• Provide effective challenge and independent oversight across data management and regulatory analytics by leading self-assessments and compliance reviews, assessing portfolio risk exposure, and evaluating the effectiveness of governance and controls.

• Identify emerging risks, issues, and trends across initiatives, systems, processes, and workflows; analyze impacts; and recommend or escalate mitigating actions as appropriate.

• Understanding of ORX.

Regulatory & Reporting

• Develop and manage governance, risk, and regulatory reporting, including metrics, status updates, and required review/sign-off for internal and external stakeholders.

• Represent the governance program during regulatory exams, audits, and other oversight activities, and provide specialized support for related regulatory requirements as needed.

Stakeholder Engagement & Advisory

• Advise business and corporate partners on implementation of the risk framework, providing practical guidance, second-line support, and effective challenge on risk management expectations.

• Lead stakeholder engagement, communications, and training activities to improve transparency, consistency, accountability, and adoption of governance requirements.

Process & Tools

• Lead or support the design, implementation, and execution of core governance, oversight, and regulatory administration processes aligned to applicable policies, procedures, and standards.

• Maintain tools, templates, and program artifacts that support risk assessment, control management, reporting, and technology/information risk governance activities.

GARP participation is nice to have.

• Bachelor’s degree in finance, business, data, or a related data field like cyber or data privacy (advanced MSc degree or certifications such as DCAM, CRISC, or CISA preferred
• Relevant experience in risk management, data governance, or regulatory oversight within a financial services or highly regulated environment.
• Strong knowledge of risk management frameworks, regulatory expectations (e.g., BCBS 239, data governance principles), and control environments is essential.
• Demonstrated ability to analyze complex data and processes, influence stakeholders, and communicate effectively across technical and non-technical audiences is required
• Experience in governance, reporting, and audit or regulatory engagement.