Data Risk Manager

Job Title: Data Risk Manager

Location: Toronto, ON (Hybrid)

Estimated Duration: 2 Months

JOB TITLE: Business / Technology Consultant (Data Risk Manager)
DIRECTLY REPORTS TO: Director, Data Governance
SPAN OF CONTROL: This is an individual contributor role

JOB SUMMARY:
We are looking for a Business / Technology Consultant (Data Risk Manager) to join our Data Governance (DG) team. The role is primarily responsible for evaluating and forecasting potential losses or risks to data that a company may encounter and be impacted. Lead on creating data risk and control methodology and review/assessment process. Utilize proactive approaches and measures to minimize exposure to financial, regulatory, legal, or reputational harm caused by loss, limitations (e.g., inaccurate and poor data quality, lack of metadata, data and system breaks) and related issues.

The Data Risk Manager requires expertise in monitoring and conducting gap assessment of internal controls – Collaborate with business owners to ensure proper monitoring and assessment of internal controls, utilizing key metrics such as KPIs, KRIs, and KCIs to evaluate effectiveness. Knowledge in applying assessment techniques such as Data Management Capability Assessment (DCAM), Risk and Control Self-Assessments (RCSA), etc.

ESSENTIAL FUNCTIONS:

• Subject Matter Expert and the face to the business as subject matter expert for Data Risk
• Oversee the development and execution of Data Risk strategy, mandates, and priorities with capabilities, roadmap and goals
• Work with the stakeholders such as Lead Data Stewards, Data Stewards and other data practitioners to continuously ensure that the highest possible levels of commitment and delivery of key DG and Data Risk requirements are applied
• Deliver comprehensive risk reporting on data risks, controls, and mitigations, ensuring that senior management and relevant committees receive timely updates and actionable insights
• Ability to create any of the following: framework, policies, standards, procedures, templates, etc.
• Expertise and knowledge in creating risk appetite statements, risk limits and thresholds, impact assessments, or risk tolerance
• Expertise in risk monitoring and reporting, including escalations to senior management when needed
• Conduct audits/assessments or independent challenge review of internal and external (business units) compliance with data governance standards, procedures, including if necessary, liaise with internal and external auditors, or regulators
• Monitor and assess internal controls – Collaborate with business owners to ensure proper monitoring and evaluate effectiveness of internal controls utilizing key metrics such as KPIs, KRIs, and KCIs
• Implement regulatory requirements such as OSFI, Privacy, Canadian Federal regulations, Health, Dental and Investment regulations, etc. and assess impact to the company

QUALIFICATIONS:
EDUCATION:

• Bachelor’s/University degree in relevant fields such as Risk Management, Information/Data Science, Data Management, or Computer Science and/or Engineering
• Master’s degree is a plus

• Self-starter, creative, and willingness to adjust and pivot depending on the priorities
• Experience in Cyber Security, Privacy, NIST Compliance, PCI DSS, SOX Compliance, ISO 27001/2           
• Experience or certification in the field of enterprise risk, data maturity models, data & Artificial Intelligence risk and information systems control, financial risk management, data modelling, AI/ML methodologies, etc.
• Expert knowledge of data management, data governance, data breaches, and data & AI risk principles
• Expert in creating data risk methodology and applying risk program to the company
• Experience in compliance, risk and audit program and practice including regulatory audits
• Ability to change mindset and drive change to gain acceptance and adoption from business units and stakeholders, including senior executives and internal departments
• Promote a culture of data awareness and literacy and through training, ensuring that data is recognized as a valuable enterprise asset. This includes regular communication with stakeholders, senior executives and influencing stakeholders to adopt best practices in data governance principles, metadata, data quality, risk, privacy, security, and compliance
• Knowledge of Data Maturity Model (DMM) and its implementation
• Excellent communication and presentation skills

REGISTRATIONS/LICENSES/CERTIFICATIONS:

Certification in any of:

• • Risk, Compliance, or Audit fields
  • Data Maturity Model e.g., CMMI DMM; EDMC DCAM; DAMA CDMP

SKILLS/CHARACTERISTICS:

• Skilled in building and maintaining collaborative stakeholder relationships across multiple geographies and business functions. Ability to engage business units in adopting the program and identify non-compliance with mitigation/action plans
• Skilled in strategic thinking visualizing the end state of a change initiative mapping steps for adoption and implementation 
• Knowledge in handling data breaches with the escalation path and apply resolution/mitigation techniques
• Drive to promote both adaptive changes incrementally or transformational changes that involve major shifts in mission, strategy, structure, and processes