Manager, Cloud Risk & Data Governance with Law Firm Experience (Remote)

Job Description

Job Description

Job Description

We are open to candidates being local to any of their US offices, including Atlanta, Boston, LA, Chicago, Dallas, Houston, NYC, Orange County, Palo Alto, San Diego, SF, and Washington DC (strong preference for highlighted ones). This is remote, but it can change, so candidates must be in reasonable commuting distance.

Our client, a leading Am Law 50 firm, is seeking a Cloud Governance Manager to oversee the firm's data management practices and ensure secure, efficient, and compliant use of data across its enterprise solutions. This role is pivotal in developing and implementing governance frameworks, policies, and standards that support organizational objectives while enabling effective data sharing, regulatory compliance, and robust protection of sensitive information.

Key Responsibilities

Data Governance Framework : Develop and implement policies, procedures, and standards for managing data assets from intake through disposal, leveraging tools such as Microsoft Purview Information Protection, Data Lifecycle Management, Data Loss Prevention, iManage Threat Manager, and Varonis.

Data Retention & Classification : Design and enforce technical controls for data retention and classification policies, ensuring compliance with regulatory and business requirements.

Security & Privacy Controls : Review and assess security and privacy measures across platforms to safeguard firm data against unauthorized access, use, or disclosure.

Training & Enablement : Deliver training and guidance to employees on data governance best practices, clarifying responsibilities for managing and protecting data.

Stakeholder Collaboration : Partner with attorneys, business teams, and IT stakeholders to design secure, compliant data access and sharing solutions.

Integration with Governance Functions : Work closely with the Information Governance team, Office of General Counsel, Security Architecture, and GRC teams to align directives, design secure patterns, track risks, and support compliance initiatives.

Cloud Platform Leadership : Provide thought leadership for data governance across Office 365 and other cloud platforms, including reporting, alerting, and secure design patterns.

Required Skills & Competencies

Strong project management capabilities with the ability to manage risks associated with technology solutions.

High-level technical understanding of security applications, cloud platforms, and data governance architectures.

Knowledge of information security standards and frameworks (CSF, NIST, ISO) and awareness of the evolving cyber threat landscape.

Proficiency in governance, risk, and compliance (GRC) practices, with strong analytical and problem-solving skills.

Excellent collaboration, communication, and stakeholder management skills.

Qualifications

Bachelor's degree in Information Security, Information Assurance, Computer Science, or Information Systems preferred.

7+ years of combined IT, information security, and risk management experience.

Professional certifications such as CISA, CISM, GSEC, CISSP, or CRISC are preferred.

Advanced knowledge of Microsoft Purview and other governance tools.

Strong understanding of risk management frameworks, security technologies, and law firm operations.

Proficiency in Microsoft Outlook, Word, Excel, Visio, and PowerPoint.

This position will serve as a translator / liaison to the Information Security team, IT, and our OGC teams. They are not an engineer, but a level higher.

They should have a technical background in terms of being able to translate information to other teams, but they are not going to be focused on the engineering component.

This role is responsible for identifying any risks from a data perspective and ensuring there are proper safeguards in place. They must have experience with cloud architecture, security, and risk management, and have experience focused on data protection in a cloud environment.

The certificates in the JD are nice to have, but we are more focused on actual experience.

They will not be managing any team members, but will be an individual contributor.

Law firm experience is highly preferred, but we are open to other highly regulated industries.

Candidates must have longevity at their past jobs - no temp / contract / freelance -focused resume will be considered.