Sr Manager, Governance, Risk, Compliance & Privacy
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 7+ years
- Category
- Not specified
- Posted
Skills
Must have
- Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, or related field.
- Minimum 7-10 years of experience in Governance, Risk, Compliance (GRC), Privacy, Information Security, Audit, or related disciplines.
- Experience leading or managing governance, compliance, privacy, audit, or risk management programs within complex organizations.
- Experience supporting internal and external audits, assessments, and compliance initiatives involving security and privacy controls.
- Experience collaborating across technical and business teams to drive governance and compliance initiatives.
Full description
About Us
Data Analysis Incorporated (DAI) is the controlling entity of the O’Neil family of businesses. DAI and its subsidiaries operate in diverse industries worldwide, including global equity markets, health care, financial services, digital news, and insurance. Our global footprint allows our teams to be responsive to customer needs in a timely and efficient manner. We are dedicated to using technology and innovation to bring change and growth to our businesses. We believe in a dynamic workplace, creating engaging, informative products and services that help our customers succeed. Integrity is an essential characteristic for our firms and our associates
Summary
The Senior Manager, Governance, Risk, Compliance & Privacy (GRCP) is responsible for leading and managing the organization’s governance, risk, compliance, and privacy initiatives to ensure alignment with applicable laws, regulations, contractual obligations, security standards, and internal policies. This role partners closely with Information Security, IT, Legal, Human Resources, Compliance, business stakeholders, and external partners to strengthen governance practices, mature risk management processes, support audit and regulatory readiness, and promote privacy and security accountability across DAI companies.
Duties and Responsibilities
- Lead the implementation and continuous improvement of governance frameworks, policies, standards, procedures, and controls related to information security, privacy, and technology compliance.
- Manage cybersecurity, operational risk, and third-party risk management activities including risk identification, assessment, remediation tracking, and executive reporting.
- Lead compliance initiatives supporting regulatory, contractual, and industry requirements, including audit coordination, evidence collection, remediation tracking, and certification readiness efforts.
- Direct privacy and data protection activities including privacy impact assessments (PIAs/DPIAs), privacy risk assessments, privacy incident coordination, and data subject request support.
- Facilitate governance reviews, compliance meetings, and cross-functional initiatives to ensure accountability and timely remediation of identified risks and compliance gaps.
- Develop, maintain, and report metrics related to governance, risk, compliance, privacy, audits, control effectiveness, remediation activities, and program maturity.
- Partner with business and technical teams to integrate security, privacy, and compliance requirements into operational and technology processes using privacy-by-design and security-by-design principles.
- Lead enterprise-wide security and privacy awareness initiatives, training programs, communications, and guidance to promote a culture of compliance, accountability, and secure business operations.
- Support governance activities associated with incident response, business continuity, disaster recovery, crisis management, and operational resilience programs.